Description
A flaw was found in WildFly Elytron. A variation to the use of a session fixation exploit when using Undertow was found despite Undertow switching the session ID after authentication.
Remediation
References
Related Vulnerabilities
GlassFish Improper Input Validation Vulnerability (CVE-2011-5035)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)
WordPress Plugin Product Size charts for Woocommerce Unspecified Vulnerability (1.0)
WordPress Plugin WP Social Invitations Cross-Site Scripting (1.4.4.2)