Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.wildfly.security/wildfly-elytron@1.11.3
purl pkg:maven/org.wildfly.security/wildfly-elytron@1.11.3
Tags Ghost
Next non-vulnerable version 1.15.15.Final
Latest non-vulnerable version 2.6.2.Final
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-99vp-bk8n-q3cp
Aliases:
CVE-2020-10714
GHSA-7fhr-2694-rg79
Session Fixation A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
1.11.4
Affected by 0 other vulnerabilities.
1.11.4.Final
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T15:59:55.236107+00:00 GHSA Importer Affected by VCID-99vp-bk8n-q3cp https://github.com/advisories/GHSA-7fhr-2694-rg79 38.0.0
2026-04-01T12:49:34.087056+00:00 GitLab Importer Affected by VCID-99vp-bk8n-q3cp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.wildfly.security/wildfly-elytron/CVE-2020-10714.yml 38.0.0