Vulnerability · Published Apr 9, 2024 · Assigned by redhat
CVE-2024-1233Eap: wildfly-elytron has a ssrf security issue
High 7.3
In plain English
A high-severity server-side request forgery in wildfly. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.8%top 41.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, which may result in a server-side request forgery (SSRF) vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.wildfly.security:wildfly-elytron-realm-token | no fix listed | GHSA-v4mm-q8fv-r2w5 |
Affected products (as reported)
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- RHSA-2024:3559 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3560 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3561 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3563 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3580 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3581 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3583 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9582 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9583 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-1233 vdb-entry, x_refsource_REDHAT
- RHBZ#2262849 issue-tracking, x_refsource_REDHAT
- https://github.com/advisories/GHSA-v4mm-q8fv-r2w5
- https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523
- https://issues.redhat.com/browse/WFLY-19226