💣Exploit CVE-2025-23366 - Wildfly HAL Console Stored XSS Vulnerability

[Maksim]

CVE ID : CVE-2025-23366
Published : Jan. 14, 2025, 6:16 p.m. | 18 minutes ago
Description : A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.