6.1
Medium
CVE-2024-10234 A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system
Description
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat JBoss Enterprise Application Platform 7.4.23 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | Versions not published | |
| Red Hat Single Sign-On 7 | Versions not published | |
| Red Hat Single Sign-On 7.6 for RHEL 7 | Versions not published |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Single Sign-On 7.6 for RHEL 8 | Versions not published | |
| Red Hat Single Sign-On 7.6 for RHEL 9 | Versions not published | |
| RHEL-8 based Middleware Containers 7.6 | earliest → < 7.6-67 | 7.6-67 |
| Red Hat Build of Keycloak | Versions not published | |
| Red Hat Fuse 7 | Versions not published | |
| Red Hat JBoss Data Grid 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7 | Versions not published |
References
- RHSA-2025:10924 access.redhat.com
- RHSA-2025:10925 access.redhat.com
- RHSA-2025:10926 access.redhat.com
- RHSA-2025:10931 access.redhat.com
- RHSA-2025:11636 access.redhat.com
- RHSA-2025:11638 access.redhat.com
- RHSA-2025:11639 access.redhat.com
- RHSA-2025:11640 access.redhat.com
- RHSA-2025:11645 access.redhat.com
- RHSA-2025:2025 access.redhat.com
- RHSA-2025:2026 access.redhat.com
- RHSA-2025:2029 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2320848 bugzilla.redhat.com
Timeline
- Published
- Last modified