A security issue was found in keycloak. The logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages. This vulnerability could be used in phishing attacks.
A security issue was found in keycloak. The logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages. This vulnerability could be used in phishing attacks.
https://bugzilla.redhat.com/show_bug.cgi?id=1770276 https://issues.jboss.org/browse/KEYCLOAK-11318
Vulmon