CVE-2019-10199

CVE-2019-10199 describes a Cross-Site Request Forgery (CSRF) vulnerability in Keycloak versions up to 6.0.1, where inadequate header checks allowed an attacker to trick an authenticated user into performing unauthorized actions. With a CVSS score of 8.8 (High), this vulnerability has a network attack vector and low attack complexity, potentially leading to high impacts on confidentiality, integrity, and availability if exploited. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.