CVE-2020-1727: Improper Input Validation

June 22, 2020 (updated June 29, 2020)

A vulnerability was found in Keycloak where every Authorization URL that points to an IDP server lacks proper input validation. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

References

bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1727
nvd.nist.gov/vuln/detail/CVE-2020-1727

Code Behaviors & Features

Detect and mitigate CVE-2020-1727 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →