CVE-2020-14338: A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP

CVE-2020-14338 is a flaw in Wildfly's XML processing component where the XMLSchemaValidator class doesn't properly enforce a security feature called "use-grammar-pool-only," allowing a specially-crafted XML file to bypass validation checks. This vulnerability affects all Xerces JBoss versions before 2.12.0.SP3 and is related to a similar flaw found in OpenJDK.