CVE-2025-23368
1 advisory.
Maven/org.wildfly.core:wildfly-elytron-integration CVE-2025-23368: high 8.1
Wildfly Elytron integration susceptible to brute force attacks via CLI
Action: Upgrade org.wildfly.core:wildfly-elytron-integration to 31.0.3.Final (31.x) or 32.0.0.Beta3 (32.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 32.0.0.Beta1 | 32.0.0.Beta3 | - |
| 0 | 31.0.3.Final | - |
Fixed versions
| 32.0.0.Beta3 | 31.0.3.Final |
Sources
- osv: GHSA-qhp6-6p8p-2rqh
- https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qhp6-6p8p-2rqh
- https://nvd.nist.gov/vuln/detail/CVE-2025-23368
- https://github.com/wildfly/wildfly-core/pull/6634
- https://github.com/wildfly/wildfly-core/pull/6635
- https://github.com/wildfly/wildfly-core/commit/11e873031c522a0b36afb59880ce4dd59efd0bc0
- https://github.com/wildfly/wildfly-core/commit/a6f9d7534aa44de741337756f8377ad3a81f7695
- https://access.redhat.com/security/cve/CVE-2025-23368
- https://bugzilla.redhat.com/show_bug.cgi?id=2337621
- https://github.com/wildfly/wildfly-core
- https://www.gruppotim.it/it/footer/red-team.html
CVE-2025-23368 · published · modified · JSON