WildFly has incomplete blacklist vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-0793 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• wildfly/wildfly · PACKAGE
• security.netapp.com/advisory/ntap-20180215-0001 · WEB
• support.hpe.com/hpsc/doc/public/display · WEB
• exploit-db.com/exploits/39573 · WEB
• packetstormsecurity.com/files/136323/Wildfly-Filter-Restriction-Bypass-Information-Disclosure.html · WEB
• security.netapp.com/advisory/ntap-20180215-0001
• exploit-db.com/exploits/39573

Lỗ hổng khác của org.wildfly:wildfly-parent

• CVE-2021-3536TRUNG BÌNH 4.8A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible t…
• CVE-2020-27822TRUNG BÌNH 5.9A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application…
• CVE-2020-25640TRUNG BÌNH 5.3A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection err…
• CVE-2020-10740CAO 7.5A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Ap…
• CVE-2015-3198CAO 7.5The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP…