| Package | Affected versions | Patched versions |
|---|---|---|
| org.jboss.hal:hal-console | < 3.7.7.Final | 3.7.7.Final |
| hal management console | < 3.7.7 | 3.7.7 |
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.
Cross-site scripting (XSS) vulnerability in the management console.
Fixed in HAL 3.7.7.Final
No workaround available
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free