{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.4.0.CR1"}],"component":"org.wildfly.security:wildfly-elytron-realm-token","cve_ids":["CVE-2024-1233"],"ecosystem":"Maven","epss":0.00847,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v4mm-q8fv-r2w5","id":"tcs_01M5N9D6J0YFY964KB9AE5RRD8","modified_at":"2026-09-10T03:50:00.359530022Z","published_at":"2024-04-09T09:31:10Z","references":["https://osv.dev/vulnerability/GHSA-v4mm-q8fv-r2w5","https://nvd.nist.gov/vuln/detail/CVE-2024-1233","https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523","https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62","https://access.redhat.com/errata/RHSA-2024:3559","https://access.redhat.com/errata/RHSA-2024:3560","https://access.redhat.com/errata/RHSA-2024:3561","https://access.redhat.com/errata/RHSA-2024:3563","https://access.redhat.com/errata/RHSA-2024:3580","https://access.redhat.com/errata/RHSA-2024:3581","https://access.redhat.com/errata/RHSA-2024:3583","https://access.redhat.com/errata/RHSA-2025:9582","https://access.redhat.com/errata/RHSA-2025:9583","https://access.redhat.com/security/cve/CVE-2024-1233","https://bugzilla.redhat.com/show_bug.cgi?id=2262849","https://github.com/wildfly-security/wildfly-elytron","https://issues.redhat.com/browse/WFLY-19226"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-v4mm-q8fv-r2w5","url":"https://osv.dev/vulnerability/GHSA-v4mm-q8fv-r2w5"}],"summary":"WildFly Elytron: SSRF security issue"}