Cross-site Request Forgery (CSRF)

org.keycloak:keycloak-installed-adapter is vulnerable to cross-site request forgeryCSRF. A local attacker is able to cause denial of service conditions because OIDC logout endpoint does not have any CSRF protection configured...

CVE-2020-10734

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...