Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-10234

Wildfly: wildfly vulnerable to cross-site scripting (xss)

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 35.0.0
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • wildfly

    From 35.0.0 · fixed in 35.0.0

  • wildfly-core-management-subsystem

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • wildfly-core-management-subsystem

    Version range not reported

  • eap8-artemis-wildfly-integration

    Version range not reported

  • eap8-azure-storage

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-gnu-getopt

    Version range not reported

  • eap8-h2database

    Version range not reported

  • eap8-hal-console

    Version range not reported

  • eap8-hibernate-commons-annotations

    Version range not reported

  • eap8-jackson-coreutils

    Version range not reported

  • eap8-jakarta-authentication-api

    Version range not reported

  • eap8-jakarta-authorization-api

    Version range not reported

  • eap8-jakarta-enterprise-concurrent

    Version range not reported

  • eap8-jakarta-enterprise-concurrent-api

    Version range not reported

  • eap8-jakarta-enterprise-lang-model

    Version range not reported

  • eap8-jakarta-security-enterprise-api

    Version range not reported

  • eap8-jakarta-servlet-jsp-api

    Version range not reported

  • eap8-javaewah

    Version range not reported

  • eap8-jboss-aesh

    Version range not reported

  • eap8-jboss-common-beans

    Version range not reported

  • eap8-jboss-dmr

    Version range not reported

  • eap8-jboss-ejb3-ext-api

    Version range not reported

  • eap8-jboss-el-api_5.0_spec

    Version range not reported

  • eap8-jboss-genericjms

    Version range not reported

  • eap8-jboss-iiop-client

    Version range not reported

  • eap8-jboss-invocation

    Version range not reported

  • eap8-jboss-logmanager

    Version range not reported

  • eap8-jboss-msc

    Version range not reported

  • eap8-jboss-remoting-jmx

    Version range not reported

  • eap8-jboss-stdio

    Version range not reported

  • eap8-jboss-threads

    Version range not reported

  • eap8-jboss-transaction-spi

    Version range not reported

  • eap8-jboss-vfs

    Version range not reported

  • eap8-jbossws-api

    Version range not reported

  • eap8-jbossws-common

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-jbossws-spi

    Version range not reported

  • eap8-jcip-annotations

    Version range not reported

  • eap8-json-patch

    Version range not reported

  • eap8-jul-to-slf4j-stub

    Version range not reported

  • eap8-reactivex-rxjava2

    Version range not reported

  • eap8-slf4j-jboss-logmanager

    Version range not reported

  • eap8-staxmapper

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-common

    Version range not reported

  • eap8-woodstox-core

    Version range not reported

  • eap8-xml-commons-resolver

    Version range not reported

  • eap8-artemis-wildfly-integration

    Version range not reported

  • eap8-azure-storage

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-gnu-getopt

    Version range not reported

  • eap8-h2database

    Version range not reported

  • eap8-hal-console

    Version range not reported

  • eap8-hibernate-commons-annotations

    Version range not reported

  • eap8-jackson-coreutils

    Version range not reported

  • eap8-jakarta-authentication-api

    Version range not reported

  • eap8-jakarta-authorization-api

    Version range not reported

  • eap8-jakarta-enterprise-concurrent

    Version range not reported

  • eap8-jakarta-enterprise-concurrent-api

    Version range not reported

  • eap8-jakarta-enterprise-lang-model

    Version range not reported

  • eap8-jakarta-security-enterprise-api

    Version range not reported

  • eap8-jakarta-servlet-jsp-api

    Version range not reported

  • eap8-javaewah

    Version range not reported

  • eap8-jboss-aesh

    Version range not reported

  • eap8-jboss-common-beans

    Version range not reported

  • eap8-jboss-dmr

    Version range not reported

  • eap8-jboss-ejb3-ext-api

    Version range not reported

  • eap8-jboss-el-api_5.0_spec

    Version range not reported

  • eap8-jboss-genericjms

    Version range not reported

  • eap8-jboss-iiop-client

    Version range not reported

  • eap8-jboss-invocation

    Version range not reported

  • eap8-jboss-logmanager

    Version range not reported

  • eap8-jboss-msc

    Version range not reported

  • eap8-jboss-remoting-jmx

    Version range not reported

  • eap8-jboss-stdio

    Version range not reported

  • eap8-jboss-threads

    Version range not reported

  • eap8-jboss-transaction-spi

    Version range not reported

  • eap8-jboss-vfs

    Version range not reported

  • eap8-jbossws-api

    Version range not reported

  • eap8-jbossws-common

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-jbossws-spi

    Version range not reported

  • eap8-jcip-annotations

    Version range not reported

  • eap8-json-patch

    Version range not reported

  • eap8-jul-to-slf4j-stub

    Version range not reported

  • eap8-reactivex-rxjava2

    Version range not reported

  • eap8-slf4j-jboss-logmanager

    Version range not reported

  • eap8-staxmapper

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-common

    Version range not reported

  • eap8-woodstox-core

    Version range not reported

  • eap8-xml-commons-resolver

    Version range not reported

  • wildfly-core-management-client

    Version range not reported

  • rh-sso7-keycloak

    Version range not reported

  • rh-sso7-keycloak

    Version range not reported

  • rh-sso7-keycloak

    Version range not reported

  • rh-sso-7/sso76-openshift-rhel8

    Version range not reported

  • wildfly-core-management-subsystem

    Version range not reported

  • wildfly-core-management-subsystem

    Version range not reported

  • wildfly-core-management-subsystem

    Version range not reported

  • wildfly-core-management-subsystem

    Version range not reported

References 14

access.redhat.com

bugzilla.redhat.com