Search for packages
| purl | pkg:maven/org.wildfly.security/wildfly-elytron-http-oidc@2.2.7.Final |
| Next non-vulnerable version | 2.2.9.Final |
| Latest non-vulnerable version | 2.6.2.Final |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-rkxb-8u8q-1ua4
Aliases: CVE-2024-12369 GHSA-5565-3c98-g6jc |
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack ### Impact A vulnerability was found in OIDC-Client. When using the elytron-oidc-client subsystem with WildFly, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack. ### Patches [2.2.9.Final](https://github.com/wildfly-security/wildfly-elytron/releases/tag/2.2.9.Final) [2.6.2.Final](https://github.com/wildfly-security/wildfly-elytron/releases/tag/2.6.2.Final) ### Workarounds Currently, no mitigation is currently available for this vulnerability. ### References https://nvd.nist.gov/vuln/detail/CVE-2024-12369 https://access.redhat.com/security/cve/CVE-2024-12369 https://bugzilla.redhat.com/show_bug.cgi?id=2331178 https://issues.redhat.com/browse/ELY-2887 |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T23:24:53.899526+00:00 | GitLab Importer | Affected by | VCID-rkxb-8u8q-1ua4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.wildfly.security/wildfly-elytron-http-oidc/CVE-2024-12369.yml | 38.4.0 |
| 2026-04-12T00:44:15.288762+00:00 | GitLab Importer | Affected by | VCID-rkxb-8u8q-1ua4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.wildfly.security/wildfly-elytron-http-oidc/CVE-2024-12369.yml | 38.3.0 |
| 2026-04-03T00:52:12.175644+00:00 | GitLab Importer | Affected by | VCID-rkxb-8u8q-1ua4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.wildfly.security/wildfly-elytron-http-oidc/CVE-2024-12369.yml | 38.1.0 |