Wildfly HAL Console Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the HAL Console component of Wildfly. This issue arises because the application fails to properly sanitize user input before it is displayed on web pages served to other users. To exploit this vulnerability, an attacker must be authenticated and belong to one of the following management groups: 'SuperUser', 'Admin', or 'Maintainer'.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.