CVE-2020-1723

Published: Jan 28, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0

Affected (3)

Products: Keycloak Gatekeeper Project: Keycloak Gatekeeper · Redhat: Mobile Application Platform

Keycloak Gatekeeper Project

1 product

Keycloak Gatekeeper

Redhat

1 product

Mobile Application Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Keycloak Gatekeeper Project Keycloak Gatekeeper	Version 6.0.1
Keycloak Gatekeeper Project Keycloak Gatekeeper	Version 7.0.0
Redhat Mobile Application Platform	Version 4.0