Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.wildfly.core/wildfly-server@13.0.3.Final
purl pkg:maven/org.wildfly.core/wildfly-server@13.0.3.Final
Next non-vulnerable version 16.0.1.Final
Latest non-vulnerable version 28.0.0.Beta2
Risk 1.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ppap-96ds-9ygc
Aliases:
CVE-2021-3644
GHSA-w88m-2936-rmxr
wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.
16.0.1.Final
Affected by 0 other vulnerabilities.
17.0.0.Beta3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.