5.4
Moyenne
CVE-2018-10934 A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA
Description
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wildfly-core 7.1 | 7.1.6.GA → 7.1.6.CR1 | Pas de correctif indiqué |