eap7-wss4j vulnerabilities

CVEs whose affected-version data names the eap7-wss4j package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2024-1233High· 7.3

2y ago

Eap: wildfly-elytron has a ssrf security issue

A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, whic…

▾ TwilightRed Hat · wildflyEPSS 0.85%via CVEORG

CVE-2023-5685High· 7.5

2y ago

A flaw was found in XNIO

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

▾ TwilightRed Hat · xnioEPSS 3.5%via NVD