Description
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | keycloak | As shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.keycloak:keycloak-oidc-client-adapter-pom | < 18.0.0 | 18.0.0 | GHSA-rvjg-gxwx-j5gf |