Executive brief
HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
Affected products
- Maven org.jboss.hal:hal-console
Junglewise Threat Intelligence
CVE-2025-2901: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
CVE-2025-2901 · Severity: low · CVSS 3.1 · Published 2025-05-06
Technologies: org.jboss.hal:hal-console (Maven). Vendors: Maven.
Related threats
- Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
- HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
- Duplicate Advisory: Wildfly HAL Console Cross-Site Scripting
- WildFly HAL Console Cross-Site Scripting
- Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment