Related Vulnerabilities: CVE-2020-10734  

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have cross-site request forgery (CSRF) protection.

Severity Medium

Remote Yes

Type Cross-site request forgery

Description

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have cross-site request forgery (CSRF) protection.

AVG-1332 keycloak 12.0.2-1 Medium Vulnerable

https://bugzilla.redhat.com/show_bug.cgi?id=1831662
https://issues.redhat.com/browse/KEYCLOAK-13653