Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment

MEDIOGHSA-64gp-r758-8pfm · Published 23/12/2024 · updated 10/09/2026

In breve

GHSA-64gp-r758-8pfm è una vulnerabilità MEDIO che riguarda org.jboss.hal:hal-console.
Correzione: aggiornare a 3.7.7.Final o successiva.

Package	Affected versions	Patched versions
org.jboss.hal:hal-console Maven	`< 3.7.7.Final`	`3.7.7.Final`

Description

A vulnerability was found in the WildFly management console. A user may perform cross-site scripting in the deployment system. An attacker (or insider) may execute a malicious payload which could trigger an undesired behavior against the server.

Impact

Cross-site scripting (XSS) vulnerability in the management console.

Patches

Fixed in HAL 3.7.7.Final

Workarounds

No workaround available

References

hal/console security advisory · WEB
hal/console · PACKAGE
hal/console release v3.7.7 · WEB
issues.redhat.com/browse/WFLY-19969 · WEB

Altre vulnerabilità di org.jboss.hal:hal-console

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free