A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-1724.json"