Description

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.

Remediation

References

CVE-2018-10934

Related Vulnerabilities

Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5950)

Lighttpd Resource Management Errors Vulnerability (CVE-2010-0295)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6433)

PHP Improper Input Validation Vulnerability (CVE-2007-3799)

Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-10934