{"action":"Upgrade org.wildfly.core:wildfly-elytron-integration to 31.0.3.Final (31.x) or 32.0.0.Beta3 (32.x) or later.","affected":[{"fixed":"32.0.0.Beta3","introduced":"32.0.0.Beta1"},{"fixed":"31.0.3.Final","introduced":"0"}],"component":"org.wildfly.core:wildfly-elytron-integration","cve_ids":["CVE-2025-23368"],"ecosystem":"Maven","epss":0.00885,"exploited":false,"fixed_versions":["32.0.0.Beta3","31.0.3.Final"],"ghsa_id":"GHSA-qhp6-6p8p-2rqh","id":"tcs_01M5N99KQ9EHJR58WGABDWWA0B","modified_at":"2026-02-13T21:26:06.441330Z","published_at":"2026-02-13T20:52:26Z","references":["https://osv.dev/vulnerability/GHSA-qhp6-6p8p-2rqh","https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qhp6-6p8p-2rqh","https://nvd.nist.gov/vuln/detail/CVE-2025-23368","https://github.com/wildfly/wildfly-core/pull/6634","https://github.com/wildfly/wildfly-core/pull/6635","https://github.com/wildfly/wildfly-core/commit/11e873031c522a0b36afb59880ce4dd59efd0bc0","https://github.com/wildfly/wildfly-core/commit/a6f9d7534aa44de741337756f8377ad3a81f7695","https://access.redhat.com/security/cve/CVE-2025-23368","https://bugzilla.redhat.com/show_bug.cgi?id=2337621","https://github.com/wildfly/wildfly-core","https://www.gruppotim.it/it/footer/red-team.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-qhp6-6p8p-2rqh","url":"https://osv.dev/vulnerability/GHSA-qhp6-6p8p-2rqh"}],"summary":"Wildfly Elytron integration susceptible to brute force attacks via CLI"}