CVE-2020-10776

Name of the Vulnerable Software and Affected Versions Keycloak versions prior to 12.0.0

Description A flaw was found in Keycloak where it is possible to add unsafe schemes for the redirect uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

Recommendations For versions prior to 12.0.0, update to version 12.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the redirect uri parameter to minimize the risk of exploitation.