EPSS
Percentile
12.6%
A flaw was found in keycloak. The OIDC logout endpoint does not have CSRF protection. The highest threat from this vulnerability is to system availability.
bugzilla.redhat.com/show_bug.cgi?id=1831662
github.com/keycloak/keycloak
github.com/keycloak/keycloak/security/advisories/GHSA-rvjg-gxwx-j5gf
issues.redhat.com/browse/KEYCLOAK-13653
nvd.nist.gov/vuln/detail/CVE-2020-10734