CVE-2019-10169

CVE-2019-10169 describes a high-severity vulnerability in Red Hat Keycloak's user-managed access (UMA) interface. An authenticated attacker with UMA permissions can inject and execute arbitrary code by configuring a malicious script within a UMA policy. This allows for complete compromise of confidentiality, integrity, and availability with high impact. While the CVSS score is 7.2 (HIGH), there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.