Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.wildfly/wildfly-parent@21.0.2.Final
purl pkg:maven/org.wildfly/wildfly-parent@21.0.2.Final
Next non-vulnerable version 23.0.2.Final
Latest non-vulnerable version 23.0.2.Final
Risk 1.7
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ft9p-n5ew-abbf
Aliases:
CVE-2021-3536
GHSA-v2wx-jj66-2hp7
Cross-site Scripting in Wildfly A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.
23.0.2.Final
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-4tqr-jxeh-f7d8 Wildfly has a memory leak vulnerability A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability. CVE-2020-27822
GHSA-qx3p-9mmp-4v8h