CVE-2025-23366
1 advisory.
Maven/org.jboss.hal:hal-console CVE-2025-23366: medium 6.5
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
Action: Upgrade org.jboss.hal:hal-console to 3.7.7.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.7.Final | - |
Fixed versions
| 3.7.7.Final |
Sources
- osv: GHSA-jhvj-f397-8w6q
- https://github.com/hal/console/security/advisories/GHSA-jhvj-f397-8w6q
- https://access.redhat.com/security/cve/CVE-2025-23366
- https://bugzilla.redhat.com/show_bug.cgi?id=2337619
- https://github.com/hal/console
- https://github.com/hal/console/releases/tag/v3.7.7
CVE-2025-23366 · published · modified · JSON