https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:03:23.089938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-23366 CVE-2025-23366 — Org.jboss.hal:hal-console: wildfly hal console cross-site scripting 2026-10-06T14:03:23.105269+00:00

Affected: hal-console, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.