CVE-2020-10770: SSRF
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.
Other sources
A flaw was found in Keycloak, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.
The "requesturi" is an optional parameter in the OIDC Authentication Request that allows to specify an external URI where the Request object may be found. As the Identity Provider is supposed to request the external Request object, this parameter can be easily used to launch a SSRF attack against the IdP.
https://issues.redhat.com/browse/KEYCLOAK-14019
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-10770?
CVE-2020-10770 is a vulnerability found in Keycloak before version 13.0.0, which allows an attacker to execute a Server-side request forgery (SSRF) attack.
How severe is CVE-2020-10770?
CVE-2020-10770 is considered a medium severity vulnerability with a severity score of 5.8.
Which software versions are affected by CVE-2020-10770?
Keycloak versions before 13.0.0 are affected by CVE-2020-10770.
How can CVE-2020-10770 be fixed?
To fix CVE-2020-10770, you should update Keycloak to version 13.0.0 or newer.
Where can I find more information about CVE-2020-10770?
You can find more information about CVE-2020-10770 in the Red Hat Security Advisory RHSA-2021:0318 and RHSA-2021:0320.