CVE-2020-10734 log

Source
Severity Medium
Remote Yes
Type Cross-site request forgery
Description
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have cross-site request forgery (CSRF) protection.
Group Package Affected Fixed Severity Status Ticket
AVG-1332 keycloak 13.0.0-1 Medium Vulnerable
References
https://bugzilla.redhat.com/show_bug.cgi?id=1831662
https://issues.redhat.com/browse/KEYCLOAK-13653