{"action":"Upgrade org.wildfly.security:wildfly-elytron-http-oidc to 2.2.5.Final or later.","affected":[{"fixed":"2.2.5.Final","introduced":"0"}],"component":"org.wildfly.security:wildfly-elytron-http-oidc","cve_ids":["CVE-2023-6236"],"ecosystem":"Maven","epss":0.00328,"exploited":false,"fixed_versions":["2.2.5.Final"],"ghsa_id":"GHSA-jpmx-996v-48fm","id":"tcs_01M5N93CST7SRE3EGM3TNGT2ZQ","modified_at":"2026-09-10T03:50:12.883119876Z","published_at":"2024-04-10T15:30:37Z","references":["https://osv.dev/vulnerability/GHSA-jpmx-996v-48fm","https://nvd.nist.gov/vuln/detail/CVE-2023-6236","https://github.com/wildfly-security/wildfly-elytron/commit/6e94ec3476a279c0a130186209c50a2991ba4c84","https://access.redhat.com/errata/RHSA-2024:3580","https://access.redhat.com/errata/RHSA-2024:3581","https://access.redhat.com/errata/RHSA-2024:3583","https://access.redhat.com/security/cve/CVE-2023-6236","https://bugzilla.redhat.com/show_bug.cgi?id=2250812","https://github.com/wildfly-security/wildfly-elytron"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-jpmx-996v-48fm","url":"https://osv.dev/vulnerability/GHSA-jpmx-996v-48fm"}],"summary":"WildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log"}