Search for packages
| purl | pkg:maven/org.wildfly/wildfly-parent@18.0.1.Final |
| Next non-vulnerable version | 23.0.2.Final |
| Latest non-vulnerable version | 23.0.2.Final |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ft9p-n5ew-abbf
Aliases: CVE-2021-3536 GHSA-v2wx-jj66-2hp7 |
Cross-site Scripting in Wildfly A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity. |
Affected by 0 other vulnerabilities. |
|
VCID-gmv1-qasy-tbcq
Aliases: CVE-2020-25640 GHSA-jw3v-5ch2-wfmm |
Insertion of Sensitive Information into Log File A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file. |
Affected by 2 other vulnerabilities. |
|
VCID-mapy-1mup-wfgx
Aliases: CVE-2020-10740 GHSA-vrmw-2xhq-hrmp |
Wildfly Unsafe Deserialization Vulnerability A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||