org.wildfly.security:wildfly-elytron

2 results · Clear filters · Feed

• Medium 4.2
  CVE-2024-12369

  Elytron-oidc-client: oidc authorization code injection

  A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code …

  Red Hat Red Hat JBoss Enterprise Application Platform 7 Red Hat JBoss Enterprise Application Platform 8 Red Hat Build of Keycloak Wolfi Maven
  Dec 9, 2024
• Medium 5.3
  CVE-2021-3642

  Observable Discrepancy in Wildfly Elytron

  A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

  org.wildfly.security:wildfly-elytron Maven
  Aug 5, 2021