CVE-2020-10776

Опубликовано: 17 нояб. 2020

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1847428
Issue Tracking
Mitigation
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1847428
Issue Tracking
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*

Версия до 12.0.0 (исключая)

EPSS

Процентиль: 50%

0.00271

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-10776

CVSS3: 4

redhat

больше 5 лет назад

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

CVE-2020-10776

CVSS3: 4.8

debian

около 5 лет назад

A flaw was found in Keycloak before version 12.0.0, where it is possib ...

GHSA-484q-784p-8m5h

CVSS3: 4.8

github

почти 4 года назад

Cross-site Scripting in keycloak

EPSS

Процентиль: 50%

0.00271

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79