Red Hat Security Advisory: Red Hat build of Thorntail 2.7.0 security and bug fix update

CVE-2019-12423 — cxf: OpenId Connect token service does not properly validate the clientId CVE-2019-17573 — cxf: reflected XSS in the services listing page CVE-2020-1695 — resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1697 — keycloak: stored XSS in client settings via application links CVE-2020-1698 — keycloak: Password leak by logged exception in HttpMethod class CVE-2020-1714 — keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution CVE-2020-1718 — keycloak: security issue on reset credential flow CVE-2020-1719 — Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain CVE-2020-1724 — keycloak: problem with privacy after user logout CVE-2020-1727 — keycloak: missing input validation in IDP authorization URLs CVE-2020-1732 — Soteria: security identity corruption across concurrent threads CVE-2020-1744 — keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP CVE-2020-1745 — undertow: AJP File Read/Inclusion Vulnerability CVE-2020-1757 — undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass CVE-2020-6950 — Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 CVE-2020-10688 — RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack CVE-2020-10705 — undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header CVE-2020-10719 — undertow: invalid HTTP request with large chunk size