Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
wildfly-security/wildfly-elytron
2.x @ 31472eb
15
Fixes
5
CVEs
HIGH
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 15 prior fixes. Scrutinize any change in this area.
http/oidc: most-fixed (5 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The OIDC logout flow has repeatedly suffered from vulnerabilities, including naive path comparisons using 'endsWith', failure to invalidate local sessions, session pollution, and missing validation of logout tokens (such as failing to reject 'alg=none' or improper 'sid' claim verification). This constitutes a major bypass vector.
Auth Bypass: In TLS 1.3 client certificate authentication, changes to the underlying SSLSession or connection were previously unchecked. This allowed the reuse of cached security identities, enabling an attacker to bypass authentication with an entirely different client certificate.
Auth Bypass: Premature URL decoding of the request URI in the OIDC HTTP facade allowed attackers to bypass security policies enforced on the raw, encoded path structure.