CVE-2023-6236
1 advisory.
Maven/org.wildfly.security:wildfly-elytron-http-oidc CVE-2023-6236: high 7.3
WildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log
Action: Upgrade org.wildfly.security:wildfly-elytron-http-oidc to 2.2.5.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.5.Final | - |
Fixed versions
| 2.2.5.Final |
Sources
- osv: GHSA-jpmx-996v-48fm
- https://nvd.nist.gov/vuln/detail/CVE-2023-6236
- https://github.com/wildfly-security/wildfly-elytron/commit/6e94ec3476a279c0a130186209c50a2991ba4c84
- https://access.redhat.com/errata/RHSA-2024:3580
- https://access.redhat.com/errata/RHSA-2024:3581
- https://access.redhat.com/errata/RHSA-2024:3583
- https://access.redhat.com/security/cve/CVE-2023-6236
- https://bugzilla.redhat.com/show_bug.cgi?id=2250812
- https://github.com/wildfly-security/wildfly-elytron
CVE-2023-6236 · published · modified · JSON