CVE-2019-10199
It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated use…
Published: 2019-08-14 · CVSS: 4.6 · CVSS 3.0
It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7