Unknown keycloak

• CVE-2020-1727 Medium 6.4 A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a 0.8%
• CVE-2020-1728 Medium 4.8 A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does no 0.8%