Service Account Takeover

keycloak is vulnerable to service account takeover. The vulnerability exists as the service accounts reset password flow were using the placeholder.org domain...