https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:00:26.629258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-19383 cnvd-2021-19383 2026-10-03T23:00:26.769002+00:00 cnvd-2021-19383 https://cve.radiocsirt.org/vuln/euvd-2026-40062 EUVD-2026-40062 2026-10-03T23:00:26.769060+00:00 EUVD-2026-40062 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10770 fkie_cve-2020-10770 2026-10-03T23:00:26.769083+00:00

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.

 https://cve.radiocsirt.org/vuln/ghsa-jh7q-5mwf-qvhw GHSA-jh7q-5mwf-qvhw — Keycloak vulnerable to Server-Side Request Forgery 2026-10-03T23:00:26.769128+00:00

Affected: Maven: org.keycloak:keycloak-core

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter `request_uri`. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.

 https://cve.radiocsirt.org/vuln/gsd-2020-10770 gsd-2020-10770 2026-10-03T23:00:26.769164+00:00 gsd-2020-10770 https://cve.radiocsirt.org/vuln/rhsa-2021:0318 RHSA-2021:0318 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.5 security update on RHEL 6 2026-10-03T23:00:26.769183+00:00

keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter