~ / search / GHSA-v2wx-jj66-2hp7

GHSA-v2wx-jj66-2hp7

Cross-site Scripting in Wildfly

Source: GitHub Advisory Database (reviewed) Low CVE-2021-3536

Packages

EcosystemPackageAffectedFixed in
Maven org.wildfly:wildfly-parent < 23.0.2.Final 23.0.2.Final

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.

References

External links from the advisory. They lead to third-party sites.