Tuesday, November 17, 2020
CVE-2020-10776
nist.gov
In: nist.gov
A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack. CVE-2020-10776