wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A parameter injection flaw was identified in Red Hat EAP's Elytron security subsystem. Specifically, an EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection allows parameter substitution due to missing URL encoding . The vulnerability is rated MEDIUM...

CVE-2026-85511 Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

io.github.martinhickson:picketlink-idm-admin (>=3.0.8, <=5.2.6), io.github.martinhickson:wildfly-core-feature-pack-common (28.0.2-bravura-2) +57 more potentially affected by CVE-2026-85511 via org.wildfly.security:wildfly-elytron-realm-token (>=2.6.0.final, <=2.6.10.sp1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version =2.6.0.final, =3.0.8, =3.16.0.cr1, =3.16.0.cr1, =10.0.25, =10.0.25, =10.0.25, =10.0.25, =10.0.25, =10.0.25, =15.0.14.final, =15.0.9.final, =15.1.7.final and more Source cves: CVE-2026-85511 Source advisory: MEND:CVE-2026-85511...

CVE-2026-85511 Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

io.quarkus:quarkus-elytron-security-oauth2 (>=3.32.0.cr1, <=3.35.4), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=3.32.0.cr1, <=3.35.4) +19 more potentially affected by CVE-2026-85511 via org.wildfly.security:wildfly-elytron-realm-token (>=2.8.0.final, <=2.8.5.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version =2.8.0.final, =3.32.0.cr1, =3.32.0.cr1, =16.2.0.dev01, =16.2.0.dev01, =16.2.0.dev01, =16.2.0.dev01, =16.2.0.dev01, =26.6.0, =26.6.0, =26.6.0, =31.0.2.final, =31.0.2.final, =31.0.2.final, =31.0.2.final, =4.2.0.cr1, =4.2.1.final and mor...

io.quarkus:quarkus-elytron-security-oauth2 (>=3.38.0.cr1, <=4.0.0.beta1), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=3.38.0.cr1, <=4.0.0.beta1) +19 more potentially affected by CVE-2026-85511 via org.wildfly.security:wildfly-elytron-realm-token (>=2.9.2.final, <=2.9.2.sp1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version =2.9.2.final, =3.38.0.cr1, =3.38.0.cr1, =16.2.2, =16.2.2, =16.2.2, =16.2.2, =16.2.2, =26.8.0, =26.8.0, =26.8.0, =33.0.0.beta4, =33.0.0.beta4, =33.0.0.beta4, =33.0.0.beta4, =2.9.2.final, =2.9.2.sp1 and more Source cves: CVE-2026-85511...

Server Side Request Forgery

org.wildfly.security:wildfly-elytron-realm-token is vulnerable to Server Side Request Forgery. The vulnerability is due to JwtValidator.resolvePublicKey not performing any whitelisting or filtering on the destination URL address during the process of checking jku and sending an HTTP request...

org.wildfly.core:wildfly-core-build (9.0.0.beta2), org.wildfly.core:wildfly-core-dist-legacy (9.0.0.beta2) +4 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.9.0.cr2)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.9.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-build 9.0.0.beta2 -...

org.wildfly.core:wildfly-core-build (9.0.0.beta4), org.wildfly.core:wildfly-core-dist-legacy (9.0.0.beta4) +5 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.9.0.cr4)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.9.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-build 9.0.0.beta4 -...

org.infinispan.server:infinispan-server-testsuite (10.0.0.beta4), org.infinispan:infinispan-cachestore-remote (10.0.0.beta4) +20 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.9.1.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.infinispan.server:infinispan-server-testsuite...

org.wildfly.core:wildfly-core-dist-legacy (10.0.0.beta1), org.wildfly.core:wildfly-core-feature-pack (10.0.0.beta1) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr2)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 10.0.0.beta1 -...

org.wildfly.core:wildfly-core-dist-legacy (10.0.0.beta2), org.wildfly.core:wildfly-core-feature-pack (10.0.0.beta2) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr3)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 10.0.0.beta2 -...

org.infinispan:infinispan-cli-client (>=10.0.0.beta5, <=10.0.0.cr2), org.wildfly.core:wildfly-core-dist-legacy (10.0.0.beta3) +4 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr4)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.infinispan:infinispan-cli-client =10.0.0.beta5,...

org.wildfly.core:wildfly-core-dist-legacy (10.0.0.beta4), org.wildfly.core:wildfly-core-feature-pack (10.0.0.beta4) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr5)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 10.0.0.beta4 -...

org.wildfly.core:wildfly-core-dist-legacy (>=10.0.0.beta8, <=10.0.0.beta9), org.wildfly.core:wildfly-core-feature-pack (>=10.0.0.beta8, <=10.0.0.beta9) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.1.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy =10.0.0.beta8,...

org.infinispan:infinispan-cli-client (>=10.1.4.final, <=10.1.9.final), org.keycloak:keycloak-saml-wildfly-elytron-adapter (>=8.0.1, <=9.0.3) +9 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.4.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.infinispan:infinispan-cli-client =10.1.4.final,...

org.wildfly.security:wildfly-elytron (1.10.6.final), org.wildfly.security:wildfly-elytron-tests (1.10.6.final) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.6.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.10.6.final -...

org.dashbuilder:dashbuilder-webapp (>=7.55.0.final, <=7.58.0.final), org.uberfire:uberfire-security-management-wildfly (>=7.44.0.final, <=7.58.0.final) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.7.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.dashbuilder:dashbuilder-webapp =7.55.0.final,...

org.wildfly.security:wildfly-elytron (1.10.8.final), org.wildfly.security:wildfly-elytron-tests (1.10.8.final) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.8.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.10.8.final -...