CVE-2019-10199

Name of the Vulnerable Software and Affected Versions: Keycloak versions up to 6.0.1

Description: The issue is related to inadequate header checks in some requests in Keycloak's account console. This could allow an attacker to trick an authenticated user into performing operations via a request from an untrusted domain.

Recommendations: For versions up to 6.0.1, update to a version that includes the necessary security fixes to perform adequate header checks in the account console.