CVE-2021-3536
published 2021-05-20CVE-2021-3536: A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in…
medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | data_grid | — | — |
| redhat | descision_manager | — | — |
| redhat | jboss_a-mq | — | — |
| redhat | jboss_enterprise_application_platform | — | — |
| redhat | wildfly | < 23.0.2 | 23.0.2 |
| redhat | wildfly | — | — |