CVE-2020-1723 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Open redirect
Description	A security issue was found in keycloak. The logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages. This vulnerability could be used in phishing attacks.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1332	keycloak	15.0.2-1	16.0.0-1	High	Fixed

References
https://bugzilla.redhat.com/show_bug.cgi?id=1770276 https://issues.jboss.org/browse/KEYCLOAK-11318