GHSA-rvjg-gxwx-j5gf
OIDC Logout redirect in keycloak
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.keycloak:keycloak-oidc-client-adapter-pom | < 18.0.0 | 18.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in keycloak. The OIDC logout endpoint does not have CSRF protection. The highest threat from this vulnerability is to system availability.
References
External links from the advisory. They lead to third-party sites.