CVE-2020-1723 log

Source
Severity Low
Remote Yes
Type Open redirect
Description
A security issue was found in keycloak. The logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages. This vulnerability could be used in phishing attacks.
Group Package Affected Fixed Severity Status Ticket
AVG-1332 keycloak 14.0.0-3 High Vulnerable
References
https://bugzilla.redhat.com/show_bug.cgi?id=1770276
https://issues.jboss.org/browse/KEYCLOAK-11318