PT-2024-40113 · Red Hat · Wildfly Management Console

Published 2024-12-23 · Updated 2024-12-23

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: WildFly management console (affected versions not specified)

Description: A cross-site scripting issue was found in the WildFly management console, specifically in the deployment system, allowing a user to perform cross-site scripting. This could enable an attacker to execute a malicious payload, potentially triggering undesired behavior against the server.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

CWE-1395

Related Identifiers

GHSA-64GP-R758-8PFM

Affected Products

Wildfly Management Console

References · 5

• https://osv.dev/vulnerability/GHSA-64gp-r758-8pfm · Vendor Advisory
• https://github.com/hal/console · Note
• https://github.com/hal/console/releases/tag/v3.7.7 · Note
• https://github.com/hal/console/security/advisories/GHSA-64gp-r758-8pfm · Note
• https://issues.redhat.com/browse/WFLY-19969 · Note