Again, I added server.cors.origin: ['*'] in kibana.yml but it doesn't solve.
The solution in Login API CORS issue with localhost is not fine for Kibana 7.2.0. Probably now the file to modify could be /usr/share/kibana/src/core/server/http/http_config.js ...