CVE-2020-10740

Name of the Vulnerable Software and Affected Versions Wildfly versions prior to 20.0.0.Final

Description A remote deserialization attack is possible in the Enterprise Application Beans (EJB) due to lack of validation/filtering capabilities in Wildfly. This issue allows for a potential attack.

Recommendations For versions prior to 20.0.0.Final, update to version 20.0.0.Final or later to resolve the issue. As a temporary workaround, consider restricting access to the EJB components to minimize the risk of exploitation.