Search vulnerabilities

Results 1

Export CSV
CVE-2020-1723

keycloak: logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages

A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed