CVE-2020-10734
11.02.2021, 18:15
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.
| Vendor | Product | Version |
|---|---|---|
| redhat | keycloak | - |
| redhat | jboss_fuse | 7.0.0 |
| redhat | openshift_application_runtimes | - |
| redhat | single_sign-on | 7.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration