Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.wildfly:wildfly-parent

6 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 medium
Registry
Maven Central

Advisories 6

  • A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible…

    Affected: fixed in 23.0.2.Final.

  • A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final.

    Affected: from 19.0.0.Final, fixed in 21.0.2.Final; from 22.0.0.Alpha1, fixed in 22.0.0.Beta1.

  • A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection…

    Affected: fixed in 21.0.0.Final.

  • CVE-2020-10740Medium 6.6

    A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise…

    Affected: fixed in 20.0.0.Final.

  • The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a…

    Affected: from 8.1.0.Final, fixed in 9.0.0.CR2.

  • Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before…

    Affected: fixed in 10.0.0.Final.