CVE-2020-1727

published 2020-06-22

CVE-2020-1727: A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a…

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
redhat	keycloak	< 9.0.2	9.0.2

CWE-20