Medium severity6.1NVD Advisory· Published Sep 16, 2020· Updated Jun 17, 2026

CVE-2020-10748

Description

A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.keycloak:keycloak-parentMaven	< 10.0.2	10.0.2

Affected products

Red Hat/Keycloak
cpe:2.3:a:redhat:keycloak:10.0.1:*:*:*:*:*:*:*
Red Hat/Single Sign On
cpe:2.3:a:redhat:single_sign-on:*:*:*:*:*:*:*:*
Range: <7.4.1
ghsa-coords
pkg:maven/org.keycloak/keycloak-parent
Range: < 10.0.2
Keycloak/Keycloakv5
Range: keycloak 10.0.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-hgpg-593r-hhvpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-10748ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000