5.4
Medium
CVE-2018-10934 A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA
Description
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| wildfly-core 7.1 | 7.1.6.GA → 7.1.6.CR1 | No fix stated |
References
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2019:1160 access.redhat.com
- RHSA-2019:1162 access.redhat.com
- RHSA-2019:1159 access.redhat.com
- RHSA-2019:1161 access.redhat.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified