CVE-2020-10770
MEDIUM 5.3EPSS 69.7%
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.
- CVSS v3.1
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS v3.1
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 69.72% chance of exploitation in the next 30 days, 99th percentile
- Nuclei
- medium · CWE-918
- Published
- 2020-12-15
- Updated
- 2024-08-04
Proof-of-concept exploits (3)
- http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.h…
- ColdFusionX/Keycloak-12.0.1-CVE-2020-107708★ · 2022-07-11
- ramshazar/keycloak-blind-ssrf-poc15★ · 2021-06-15