CVE-2025-23367
1 advisory.
Maven/org.wildfly.core:wildfly-server CVE-2025-23367: medium 6.5
WildFly improper RBAC permission
Action: Upgrade org.wildfly.core:wildfly-server to 27.0.1.Final (27.x) or 28.0.0.Beta2 (28.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 27.0.1.Final | - |
| 28.0.0.Beta1 | 28.0.0.Beta2 | - |
Fixed versions
| 27.0.1.Final | 28.0.0.Beta2 |
Sources
- osv: GHSA-qr6x-62gq-4ccp
- https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qr6x-62gq-4ccp
- https://nvd.nist.gov/vuln/detail/CVE-2025-23367
- https://access.redhat.com/errata/RHSA-2025:3465
- https://access.redhat.com/errata/RHSA-2025:3467
- https://access.redhat.com/errata/RHSA-2025:3989
- https://access.redhat.com/errata/RHSA-2025:3990
- https://access.redhat.com/errata/RHSA-2025:3992
- https://access.redhat.com/errata/RHSA-2025:4548
- https://access.redhat.com/errata/RHSA-2025:4549
- https://access.redhat.com/errata/RHSA-2025:4550
- https://access.redhat.com/errata/RHSA-2025:4552
- https://access.redhat.com/security/cve/CVE-2025-23367
- https://bugzilla.redhat.com/show_bug.cgi?id=2337620
- https://github.com/wildfly/wildfly-core
CVE-2025-23367 · published · modified · JSON