CVE-2020-10770

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.

• CWE-918
• CWE-918

• http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1846270Issue Tracking, Vendor Advisory
• http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1846270Issue Tracking, Vendor Advisory

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10765Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10766A logic bug flaw was found in Linux kernel before 5.8-rc1 in…5.5
• CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the i…5.5
• CVE-2020-10768A flaw was found in the Linux Kernel before 5.8-rc1 in the p…5.5
• CVE-2020-10769A buffer over-read flaw was found in RH kernel versions befo…5.5
• CVE-2020-1077An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-10771A flaw was found in Infinispan version 10, where it is possi…7.1
• CVE-2020-10772An incomplete fix for CVE-2020-12662 was shipped for Unbound…7.5
• CVE-2020-10773A stack information leak flaw was found in s390/s390x in the…4.4
• CVE-2020-10774A memory disclosure flaw was found in the Linux kernel's ver…5.5
• CVE-2020-10775An Open redirect vulnerability was found in ovirt-engine ver…5.3
• CVE-2020-10776A flaw was found in Keycloak before version 12.0.0, where it…4.8