CVE

CVE-2020-10770

5.3

CVSS

Description

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.

Attack Vector

Privileges Req.

User Interaction

keycloak

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2020-10770 Scanner

CVE-2020-10770 scanner - Server-Side Request Forgery (SSRF) vulnerability in keycloak

Used 3.2k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →