Vulnerability · Published Dec 15, 2020 · Assigned by redhat
CVE-2020-10770
Medium 5.3
In plain English
A medium-severity server-side request forgery in keycloak. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 69.7% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)69.7%top 0.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.keycloak:keycloak-core | 13.0.0 | GHSA-jh7q-5mwf-qvhw |
Affected products (as reported)
Weakness: CWE-918