CVE-2024-10234CWE-79cross-site-scripting

CVE-2024-10234

Medium · published October 22, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00676 · 51.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-10-22T18:15Z
Affected products (2)
ProductVersionsFixed in
redhat/build_of_keycloakall versions—
redhat/jboss_enterprise_application_platformall versions—
References (14)
EPSS history
Timeline
  • 22 OCT 13:17Z
    Wildfly: wildfly vulnerable to cross-site scripting (xss)
    cvelistv5