{"action":"Upgrade org.keycloak:keycloak-core to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2019-10199"],"ecosystem":"Maven","epss":0.00495,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-p5xp-6vpf-jwvh","id":"tcs_01M5N96K37B536JQ6CNA4171DD","modified_at":"2023-11-08T04:00:42.495082Z","published_at":"2019-09-23T18:32:27Z","references":["https://osv.dev/vulnerability/GHSA-p5xp-6vpf-jwvh","https://nvd.nist.gov/vuln/detail/CVE-2019-10199","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10199","https://github.com/keycloak/keycloak"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p5xp-6vpf-jwvh","url":"https://osv.dev/vulnerability/GHSA-p5xp-6vpf-jwvh"}],"summary":"Improper Input Validation and Cross-Site Request Forgery in Keycloak"}