title: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.0 security and bug fix update
description: cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class keycloak: stored XSS in client settings via application links keycloak: Password leak by logged exception in HttpMethod class keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution keycloak: security issue on reset credential flow Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain keycloak: problem with privacy after user logout keycloak: missing input validation in IDP authorization URLs Soteria: security identity corruption across concurrent threads keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header undertow: invalid HTTP request with large chunk size
cpes: cpe:/a:redhat:openshift_application_runtimes:1.0