de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +21 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=2.3.0.final, <=2.6.1.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.3.0.final, =2.6.1.final - org.wildfly.transaction:wildfly-transaction-client 3.0.5.final and more Source cves: CVE-2024-12369 Source...

io.hawt:hawtio-wildfly (2.17.7), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +137 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=1.17.0.final, <=2.2.8.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =1.17.0.final, =0.1.0, =9.4.45.v20220203, =9.4.45.v20220203, =9.4.45.v20220203, =10.0.8, =12.0.1, =12.0.1, =12.0.1, =10.0.10, =13.0.0.cr1, =3.1.0.final, =3.1.1.alpha1 - org.jboss.resteasy.spring:galleon-feature-pack-layers-metadata-test...

io.hawt:hawtio-wildfly (2.17.7), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +137 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=1.17.0.final, <=2.2.8.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =1.17.0.final, =0.1.0, =9.4.45.v20220203, =9.4.45.v20220203, =9.4.45.v20220203, =10.0.8, =12.0.1, =12.0.1, =12.0.1, =10.0.10, =13.0.0.cr1, =3.1.0.final, =3.1.1.alpha1 - org.jboss.resteasy.spring:galleon-feature-pack-layers-metadata-test...

de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +21 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=2.3.0.final, <=2.6.1.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.3.0.final, =2.6.1.final - org.wildfly.transaction:wildfly-transaction-client 3.0.5.final and more Source cves: CVE-2024-12369 Source...

io.hawt:hawtio-wildfly (2.17.7), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +137 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=1.17.0.final, <=2.2.8.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =1.17.0.final, =0.1.0, =9.4.45.v20220203, =9.4.45.v20220203, =9.4.45.v20220203, =10.0.8, =12.0.1, =12.0.1, =12.0.1, =10.0.10, =13.0.0.cr1, =3.1.0.final, =3.1.1.alpha1 - org.jboss.resteasy.spring:galleon-feature-pack-layers-metadata-test...

de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +21 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=2.3.0.final, <=2.6.1.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.3.0.final, =2.6.1.final - org.wildfly.transaction:wildfly-transaction-client 3.0.5.final and more Source cves: CVE-2024-12369 Source...

de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +21 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=2.3.0.final, <=2.6.1.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.3.0.final, =2.6.1.final - org.wildfly.transaction:wildfly-transaction-client 3.0.5.final and more Source cves: CVE-2024-12369 Source...

io.hawt:hawtio-wildfly (2.17.7), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +137 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron-http-oidc (>=1.17.0.final, <=2.2.8.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version =1.17.0.final, =0.1.0, =9.4.45.v20220203, =9.4.45.v20220203, =9.4.45.v20220203, =10.0.8, =12.0.1, =12.0.1, =12.0.1, =10.0.10, =13.0.0.cr1, =3.1.0.final, =3.1.1.alpha1 - org.jboss.resteasy.spring:galleon-feature-pack-layers-metadata-test...

Insufficient Verification Of Data Authenticity

org.wildfly.security:wildfly-elytron-http-oidc is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to the session token caching logic when an OIDC app serving multiple tenants accesses a new tenant with a different OIDC configuration. This flaw occurs in...

org.wildfly.security:wildfly-elytron (1.15.9.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.9.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.9.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.9.final Source cve...

org.wildfly.security:wildfly-elytron (1.15.12.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.12.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.12.final Source...

org.wildfly.security:wildfly-elytron (1.15.14.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.14.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.14.final Source...

org.drools:drools-wb-drl-extension-server (>=7.74.0.final, <=7.74.1.final), org.drools:drools-wb-drl-text-editor-backend (7.74.0.final) +29 more potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.16.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.drools:drools-wb-drl-extension-server =7.74.0.final,...

org.wildfly.security:wildfly-elytron (1.15.18.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.18.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.18.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.18.final Source...

org.wildfly.security:wildfly-elytron (1.15.22.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.22.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.22.final Source...

org.wildfly.security:wildfly-elytron (1.15.23.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.23.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.23.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.23.final Source...

org.wildfly.security:wildfly-elytron (1.15.25.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.25.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.25.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.25.final Source...

org.wildfly.security:wildfly-elytron (1.15.26.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.26.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.26.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.26.final Source...

org.wildfly.security:wildfly-elytron (1.15.28.final) potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.15.28.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.15.28.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.28.final Source...

org.infinispan:infinispan-cli-client (>=13.0.0.cr1, <=13.0.0.cr2), org.jboss:jboss-ejb-client (4.0.43.final) +76 more potentially affected by CVE-2023-6236 via org.wildfly.security:wildfly-elytron-http-oidc (1.17.0.final)

org.wildfly.security:wildfly-elytron-http-oidc MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-http-oidc and may be impacted: - org.infinispan:infinispan-cli-client =13.0.0.cr1,...