Description
A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.
Remediation
References
Related Vulnerabilities
WordPress Plugin Fudousan Cross-Site Scripting (5.7.0)
WordPress Plugin oQey Gallery 'tbpv_domain' Parameter Cross-Site Scripting (0.2)
TYPO3 Other Vulnerability (CVE-2009-3630)
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.30)
Lighttpd Uncontrolled Resource Consumption Vulnerability (CVE-2022-30780)