Description
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10924
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10925
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10926
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10931
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11636
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11638
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11639
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11640
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11645
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:2025
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:2026
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:2029
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2024-10234
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2320848
Updated 22m ago · 8 sources