REDHAT-BUG-742984: Medium severity jboss application server vulnerability
A DOM based cross-site scripting flaw was found in the way the administrative console of the JBoss Application Server processed some certain messages (the 'onerror' argument was not sanitized prior further use). A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DOM environment modification and arbitrary HTML or web script execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-742984?
The severity of REDHAT-BUG-742984 is considered high due to its potential for remote code execution via cross-site scripting.
How do I fix REDHAT-BUG-742984?
To fix REDHAT-BUG-742984, ensure that the input validation and message processing within the JBoss Application Server is properly sanitized.
Who is affected by REDHAT-BUG-742984?
REDHAT-BUG-742984 affects users of the Red Hat JBoss Application Server who utilize the administrative console.
What type of vulnerability is REDHAT-BUG-742984?
REDHAT-BUG-742984 is a DOM-based cross-site scripting (XSS) vulnerability.
Can a remote attacker exploit REDHAT-BUG-742984?
Yes, a remote attacker can exploit REDHAT-BUG-742984 by tricking victims into accessing maliciously crafted web pages.