CVE-2020-10734 OIDC Logout redirect in keycloak

What is CVE-2020-10734?

CVE-2020-10734 is a low-severity vulnerability in Redhat Keycloak, published on 11 Feb 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.

Weakness: CWE-352

Which versions are affected by CVE-2020-10734?

2 open source packages ship an affected version, including org.keycloak:keycloak-oidc-client-adapter-pom. It affects 4 products.

Products include Redhat Jboss Fuse, Redhat Keycloak, Redhat Openshift Application Runtimes, Redhat Single Sign-On.

How do I fix CVE-2020-10734?

Upgrade org.keycloak:keycloak-oidc-client-adapter-pom to 18.0.0 or later.

Is CVE-2020-10734 being exploited?

There is no known exploitation of CVE-2020-10734 in the wild and no public exploit code.

Other vulnerabilities in Redhat Keycloak

• CVE-2020-27782 Denial of service in Undertow High 7.5
• CVE-2020-10718 Security feature bypass in Wildfly High 7.5
• CVE-2020-1718 Improper Authentication for Keycloak High 7.1
• CVE-2016-1000229 Improper Neutralization of Input During Web Page Generation in swagger-ui Medium 6.1
• CVE-2014-8175 Auth bypass in n/a Medium 6.0

All Redhat Keycloak vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rvjg-gxwx-j5gf.