{"action":"Upgrade org.wildfly.core:wildfly-server to 27.0.1.Final (27.x) or 28.0.0.Beta2 (28.x) or later.","affected":[{"fixed":"27.0.1.Final","introduced":"0"},{"fixed":"28.0.0.Beta2","introduced":"28.0.0.Beta1"}],"component":"org.wildfly.core:wildfly-server","cve_ids":["CVE-2025-23367"],"ecosystem":"Maven","epss":0.00774,"exploited":false,"fixed_versions":["27.0.1.Final","28.0.0.Beta2"],"ghsa_id":"GHSA-qr6x-62gq-4ccp","id":"tcs_01M5N9A6CKCWVF65MVJJQBHA0N","modified_at":"2025-12-08T20:07:35.085775Z","published_at":"2025-01-31T17:34:30Z","references":["https://osv.dev/vulnerability/GHSA-qr6x-62gq-4ccp","https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qr6x-62gq-4ccp","https://nvd.nist.gov/vuln/detail/CVE-2025-23367","https://access.redhat.com/errata/RHSA-2025:3465","https://access.redhat.com/errata/RHSA-2025:3467","https://access.redhat.com/errata/RHSA-2025:3989","https://access.redhat.com/errata/RHSA-2025:3990","https://access.redhat.com/errata/RHSA-2025:3992","https://access.redhat.com/errata/RHSA-2025:4548","https://access.redhat.com/errata/RHSA-2025:4549","https://access.redhat.com/errata/RHSA-2025:4550","https://access.redhat.com/errata/RHSA-2025:4552","https://access.redhat.com/security/cve/CVE-2025-23367","https://bugzilla.redhat.com/show_bug.cgi?id=2337620","https://github.com/wildfly/wildfly-core"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qr6x-62gq-4ccp","url":"https://osv.dev/vulnerability/GHSA-qr6x-62gq-4ccp"}],"summary":"WildFly improper RBAC permission"}