high7.5
CVE-2020-10740
Wildfly Unsafe Deserialization Vulnerability
Impact
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.wildfly:wildfly-parent | < 20.0.0.Final | 20.0.0.Final |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Wildfly | before 20.0.0 |