THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-23366 (MEDIUM 6.5) — A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to

[NVD] CVE-2025-23366 (MEDIUM 6.5) — A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to

lownvdPublished 2025-01-14

CVE-2025-23366 CVSS: 6.5 MEDIUM Published: 2025-01-14T18:16:06.290

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintain

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-23366