Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-oidc-client-adapter-pom@3.4.2.Final
purl pkg:maven/org.keycloak/keycloak-oidc-client-adapter-pom@3.4.2.Final
Next non-vulnerable version 18.0.0
Latest non-vulnerable version 18.0.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-hp5p-7wxk-v3eu
Aliases:
CVE-2020-10734
GHSA-rvjg-gxwx-j5gf
Cross-Site Request Forgery (CSRF) A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.
18.0.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.