{"action":"Upgrade org.wildfly.security:wildfly-elytron to 1.11.4 or later.","affected":[{"fixed":"1.11.4","introduced":"0"}],"component":"org.wildfly.security:wildfly-elytron","cve_ids":["CVE-2020-10714"],"ecosystem":"Maven","epss":0.01454,"exploited":false,"fixed_versions":["1.11.4"],"ghsa_id":"GHSA-7fhr-2694-rg79","id":"tcs_01M5N8J8H08VHWMZQNQ7YFQB31","modified_at":"2026-09-10T03:49:11.807185346Z","published_at":"2022-02-15T01:39:57Z","references":["https://osv.dev/vulnerability/GHSA-7fhr-2694-rg79","https://nvd.nist.gov/vuln/detail/CVE-2020-10714","https://bugzilla.redhat.com/show_bug.cgi?id=1825714","https://github.com/wildfly-security/wildfly-elytron","https://security.netapp.com/advisory/ntap-20201223-0002"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7fhr-2694-rg79","url":"https://osv.dev/vulnerability/GHSA-7fhr-2694-rg79"}],"summary":"Session Fixation in WildFly Elytron"}