Vulnerability identifier: #VU49114

Vulnerability risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2020-10770

CWE-ID: CWE-918

Exploitation vector: Network

Exploits in database: 3

• November 25, 2021
  • Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) [Exploit-DB]
• November 18, 2021
  • Keycloak-12.0.1-CVE-2020-10770 (Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) ) [Github]
  • CVE-2020-10770 (CVE-2020-10770 for nuclei) [Github]

Impact: Information disclosure

Vulnerable software:
Keycloak
Server applications / Directory software, identity management

Vendor: Keycloak