org.wildfly.core:wildfly-server

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2025-23367

  Org.wildfly.core:wildfly-server: wildfly improper rbac permission

  A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the ser…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Maven
  Jan 30, 2025
• Medium 5.5
  CVE-2018-10862

  Improper Limitation of a Pathname to a Restricted Directory in WildFly

  WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

  org.wildfly.core:wildfly-server Maven
  Jul 27, 2018