Skip to content
OpenAdvisories

Package · Maven

org.wildfly.core:wildfly-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    CVE-2025-23367

    Org.wildfly.core:wildfly-server: wildfly improper rbac permission

    A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the ser…

    Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Maven
  • Low 3.3
    CVE-2021-3644

    wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault

    A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should no…

    org.wildfly.core:wildfly-server Maven
  • Medium 5.5
    CVE-2018-10862

    Improper Limitation of a Pathname to a Restricted Directory in WildFly

    WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

    org.wildfly.core:wildfly-server Maven