Threats tagged 'ghsa-h79m-h3j4-r7qm'

A vulnerability in WildFly Elytron's password hashing and verification process causes input normalization using Unicode NFKC, which collapses fullwidth characters to ASCII equivalents. This reduces the effective password keyspace, allowing remote attackers to more easily guess passwords intended to include non-ASCII fullwidth characters by using ASCII-only dictionaries, potentially leading to unauthorized access.