CVE-2023-0657: Keycloak vulnerable to impersonation via logout token exchange

The vulnerability stems from improper enforcement of token types during signature validation. Keycloak's OIDC token handling flow involves TokenManager and TokenValidator classes for token verification. The described flaw matches scenarios where these components validate() cryptographic signatures without confirming the token's intended type (e.g., access token vs. logout token). The functions above are central to token validation and align with the CWEs listed (CWE-347, CWE-273), which indicate missing checks after cryptographic verification. While explicit patch details are unavailable, the vulnerability's mechanics strongly implicate these core token validation functions.