Exploit for #VU49114 Server-Side Request Forgery (SSRF) in Keycloak

Vulnerability identifier: #VU49114

Vulnerability risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2020-10770

CWE-ID: CWE-918

Exploitation vector: Network

Exploits in database: 3

• November 25, 2021
  • Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) [Exploit-DB]
• November 18, 2021
  • Keycloak-12.0.1-CVE-2020-10770 (Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) ) [Github]
  • CVE-2020-10770 (CVE-2020-10770 for nuclei) [Github]

Vulnerable software:
Keycloak
Server applications / Directory software, identity management

Vendor: Keycloak