CVE-2024-10234
Vulnérabilité moyenne
CVSS 6.1 · Moyenne
EPSS 0.7%
•Versions : 0:5.4.15-1.Final_redhat_00001.1.el8eap, 7.6-67, 0:1.6.0-4.Final_redhat_00001.1.el8eap, 0:3.0.0-3.redhat_00001.1.el9eap, 0:1.15.26-1.Final_redhat_00001.1.el9eap, 0:3.3.27-1.Final_redhat_00001.1.el8eap, 0:3.3.27-1.Final_redhat_00001.1.el9eap, 0:1.5.21-1.Final_redhat_00001.1.el7eap, <*, 0:2.0.1-2.Final_redhat_00001.1.el9eap, 0:3.0.0-3.Final_redhat_00001.1.el8eap, 0:1.0.1-2.Final_redhat_3.1.el8eap, 0:3.0.0-2.redhat_00001.1.el9eap, 0:3.6.23-1.Final_redhat_00001.1.el8eap, 0:1.15.26-1.Final_redhat_00001.1.el7eap, 0:1.10.0-42.Final_redhat_00042.1.el8eap, 0:2.0.1-2.Final_redhat_00001.1.el8eap, 0:1.2.0-3.redhat_12.1.el9eap, 0:1.0.13-2.redhat_5.1.el8eap, 0:1.1.13-2.redhat_00001.1.el8eap, 0:2.16.0-21.redhat_00055.1.el9eap, 0:1.5.1-2.Final_redhat_00001.1.el8eap, 0:5.0.0-2.Final_redhat_00001.1.el9eap, 0:6.0.23-3.SP2_redhat_00001.1.el7eap, 0:3.0.0-2.redhat_00001.1.el8eap, 0:7.4.23-3.GA_redhat_00002.1.el8eap, 0:2.0.0-2.Final_redhat_00001.1.el9eap, 0:3.0.0-2.Final_redhat_00001.1.el9eap, 0:2.16.0-21.redhat_00055.1.el7eap, 0:6.0.23-3.SP2_redhat_00001.1.el8eap, 0:3.0.0-4.redhat_00001.1.el8eap, 0:3.3.0-2.Final_redhat_00001.1.el8eap, 0:800.6.0-2.GA_redhat_00002.1.el8eap, 0:8.0.0-3.Final_redhat_00001.1.el9eap, 0:1.10.0-42.Final_redhat_00042.1.el9eap, 0:1.5.21-1.Final_redhat_00001.1.el9eap, 1:1.0.2-5.redhat_00004.1.el7eap, 0:2.3.0-2.Final_redhat_00001.1.el9eap, 0:18.0.19-1.redhat_00002.1.el7sso, 0:3.5.10-1.redhat_00001.1.el7eap, 0:4.0.1-2.redhat_00001.1.el9eap, 0:3.0.0-4.redhat_00001.1.el9eap, 0:2.1.0-3.redhat_00001.1.el9eap, 0:2.1.19-2.Final_redhat_00001.1.el9eap, 0:1.10.0-42.Final_redhat_00042.1.el7eap, 0:1.1.13-2.redhat_00001.1.el9eap, 0:2.4.0-2.redhat_00001.1.el9eap, 0:2.4.0-3.Final_redhat_00001.1.el9eap, 0:5.1.0-1.Final_redhat_00001.1.el8eap, 0:8.0.6-5.GA_redhat_00004.1.el9eap, <35.0.0, 0:3.0.4-2.Final_redhat_00001.1.el8eap, 0:3.0.0-3.redhat_00001.1.el8eap, 0:3.0.2-2.redhat_00001.1.el9eap, 0:1.9.0-2.redhat_00002.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el9eap, 0:1.4.0-2.Final_redhat_00001.1.el9eap, 0:1.1.0-2.Final_redhat_00001.1.el9eap, 0:3.0.0-2.Final_redhat_00001.1.el8eap, 0:6.4.0-3.redhat_00003.1.el9eap, 0:1.6.1-2.Final_redhat_00001.1.el9eap, 0:2.16.0-21.redhat_00055.1.el8eap, 0:3.3.0-2.Final_redhat_00001.1.el9eap, 0:2.0.0-2.Final_redhat_00001.1.el8eap, 0:3.3.27-1.Final_redhat_00001.1.el7eap, 0:7.3.1-1.Final_redhat_00001.1.el9eap, 0:2.3.0-2.Final_redhat_00001.1.el8eap, 0:2.1.214-2.redhat_00001.1.el9eap, 0:8.6.6-5.redhat_00001.1.el8eap, 0:1.6.0-4.Final_redhat_00001.1.el9eap, 0:6.0.6-2.Final_redhat_00001.1.el9eap, 0:2.2.21-2.redhat_00001.2.el8eap, 0:1.6.1-2.Final_redhat_00001.1.el8eap, 0:18.0.19-1.redhat_00002.1.el9sso, 0:1.15.26-1.Final_redhat_00001.1.el8eap, 0:2.4.0-2.redhat_00001.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el8eap, 0:3.0.0-3.Final_redhat_00001.1.el9eap, 0:7.4.23-3.GA_redhat_00002.1.el7eap, 0:8.6.6-5.redhat_00001.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el7eap, 0:1.2.0-3.redhat_12.1.el8eap, 0:800.6.0-2.GA_redhat_00002.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el8eap, 0:5.4.15-1.Final_redhat_00001.1.el9eap, 0:5.4.15-1.Final_redhat_00001.1.el7eap, 0:2.0.3-1.Final_redhat_00001.1.el8eap, 0:1.0.1-2.Final_redhat_3.1.el9eap, 0:3.5.10-1.redhat_00001.1.el8eap, 0:3.6.23-1.Final_redhat_00001.1.el9eap, 0:2.0.3-1.Final_redhat_00001.1.el9eap, 0:5.1.0-1.Final_redhat_00001.1.el9eap, 0:18.0.19-1.redhat_00002.1.el8sso, 0:8.0.6-5.GA_redhat_00004.1.el8eap, 1:1.0.2-5.redhat_00004.1.el9eap, 0:4.0.1-2.redhat_00001.1.el8eap, 0:7.4.23-3.GA_redhat_00002.1.el9eap, 0:2.2.21-2.redhat_00001.2.el9eap, 0:1.8.0-2.redhat_00002.1.el8eap, 0:2.1.0-3.redhat_00001.1.el8eap, 0:1.9.0-2.redhat_00002.1.el9eap, 0:1.4.0-2.Final_redhat_00001.1.el8eap, 0:3.1.0-3.redhat_00001.1.el8eap, 0:3.0.2-2.redhat_00001.1.el8eap, 0:1.0.0-2.redhat_8.1.el8eap, 35.0.0, 0:8.0.0-3.Final_redhat_00001.1.el8eap, 0:1.0.13-2.redhat_5.1.el9eap, 1:1.0.2-5.redhat_00004.1.el8eap, 0:2.1.214-2.redhat_00001.1.el8eap, 0:2.4.0-3.Final_redhat_00001.1.el8eap, 0:1.8.0-2.redhat_00002.1.el9eap, 0:3.1.0-3.redhat_00001.1.el9eap, 0:4.0.1-2.Final_redhat_00001.1.el8eap, 0:4.0.1-2.Final_redhat_00001.1.el9eap, 0:5.0.0-2.Final_redhat_00001.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el7eap, 0:1.5.21-1.Final_redhat_00001.1.el8eap, 0:1.1.0-2.Final_redhat_00001.1.el8eap, 0:1.0.0-2.redhat_8.1.el9eap, 0:7.3.1-1.Final_redhat_00001.1.el8eap, 0:6.4.0-3.redhat_00003.1.el8eap, 0:6.0.23-3.SP2_redhat_00001.1.el9eap, 0:2.1.19-2.Final_redhat_00001.1.el8eap, 0:3.0.4-2.Final_redhat_00001.1.el9eap, 0:6.0.6-2.Final_redhat_00001.1.el8eap, 0:1.5.1-2.Final_redhat_00001.1.el9eap, 0:3.5.10-1.redhat_00001.1.el9eap
Description
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.
Gravité et risque d'exploitation
CVE-2024-10234 obtient un score CVSS de 6.1/10, soit une gravité moyenne. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.68 %, ce qui la place devant 51.4 % des CVE référencées.
Que faire ?
- Vérifiez si le produit concerné (versions 0:5.4.15-1.Final_redhat_00001.1.el8eap, 7.6-67, 0:1.6.0-4.Final_redhat_00001.1.el8eap, 0:3.0.0-3.redhat_00001.1.el9eap, 0:1.15.26-1.Final_redhat_00001.1.el9eap, 0:3.3.27-1.Final_redhat_00001.1.el8eap, 0:3.3.27-1.Final_redhat_00001.1.el9eap, 0:1.5.21-1.Final_redhat_00001.1.el7eap, <*, 0:2.0.1-2.Final_redhat_00001.1.el9eap, 0:3.0.0-3.Final_redhat_00001.1.el8eap, 0:1.0.1-2.Final_redhat_3.1.el8eap, 0:3.0.0-2.redhat_00001.1.el9eap, 0:3.6.23-1.Final_redhat_00001.1.el8eap, 0:1.15.26-1.Final_redhat_00001.1.el7eap, 0:1.10.0-42.Final_redhat_00042.1.el8eap, 0:2.0.1-2.Final_redhat_00001.1.el8eap, 0:1.2.0-3.redhat_12.1.el9eap, 0:1.0.13-2.redhat_5.1.el8eap, 0:1.1.13-2.redhat_00001.1.el8eap, 0:2.16.0-21.redhat_00055.1.el9eap, 0:1.5.1-2.Final_redhat_00001.1.el8eap, 0:5.0.0-2.Final_redhat_00001.1.el9eap, 0:6.0.23-3.SP2_redhat_00001.1.el7eap, 0:3.0.0-2.redhat_00001.1.el8eap, 0:7.4.23-3.GA_redhat_00002.1.el8eap, 0:2.0.0-2.Final_redhat_00001.1.el9eap, 0:3.0.0-2.Final_redhat_00001.1.el9eap, 0:2.16.0-21.redhat_00055.1.el7eap, 0:6.0.23-3.SP2_redhat_00001.1.el8eap, 0:3.0.0-4.redhat_00001.1.el8eap, 0:3.3.0-2.Final_redhat_00001.1.el8eap, 0:800.6.0-2.GA_redhat_00002.1.el8eap, 0:8.0.0-3.Final_redhat_00001.1.el9eap, 0:1.10.0-42.Final_redhat_00042.1.el9eap, 0:1.5.21-1.Final_redhat_00001.1.el9eap, 1:1.0.2-5.redhat_00004.1.el7eap, 0:2.3.0-2.Final_redhat_00001.1.el9eap, 0:18.0.19-1.redhat_00002.1.el7sso, 0:3.5.10-1.redhat_00001.1.el7eap, 0:4.0.1-2.redhat_00001.1.el9eap, 0:3.0.0-4.redhat_00001.1.el9eap, 0:2.1.0-3.redhat_00001.1.el9eap, 0:2.1.19-2.Final_redhat_00001.1.el9eap, 0:1.10.0-42.Final_redhat_00042.1.el7eap, 0:1.1.13-2.redhat_00001.1.el9eap, 0:2.4.0-2.redhat_00001.1.el9eap, 0:2.4.0-3.Final_redhat_00001.1.el9eap, 0:5.1.0-1.Final_redhat_00001.1.el8eap, 0:8.0.6-5.GA_redhat_00004.1.el9eap, <35.0.0, 0:3.0.4-2.Final_redhat_00001.1.el8eap, 0:3.0.0-3.redhat_00001.1.el8eap, 0:3.0.2-2.redhat_00001.1.el9eap, 0:1.9.0-2.redhat_00002.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el9eap, 0:1.4.0-2.Final_redhat_00001.1.el9eap, 0:1.1.0-2.Final_redhat_00001.1.el9eap, 0:3.0.0-2.Final_redhat_00001.1.el8eap, 0:6.4.0-3.redhat_00003.1.el9eap, 0:1.6.1-2.Final_redhat_00001.1.el9eap, 0:2.16.0-21.redhat_00055.1.el8eap, 0:3.3.0-2.Final_redhat_00001.1.el9eap, 0:2.0.0-2.Final_redhat_00001.1.el8eap, 0:3.3.27-1.Final_redhat_00001.1.el7eap, 0:7.3.1-1.Final_redhat_00001.1.el9eap, 0:2.3.0-2.Final_redhat_00001.1.el8eap, 0:2.1.214-2.redhat_00001.1.el9eap, 0:8.6.6-5.redhat_00001.1.el8eap, 0:1.6.0-4.Final_redhat_00001.1.el9eap, 0:6.0.6-2.Final_redhat_00001.1.el9eap, 0:2.2.21-2.redhat_00001.2.el8eap, 0:1.6.1-2.Final_redhat_00001.1.el8eap, 0:18.0.19-1.redhat_00002.1.el9sso, 0:1.15.26-1.Final_redhat_00001.1.el8eap, 0:2.4.0-2.redhat_00001.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el8eap, 0:3.0.0-3.Final_redhat_00001.1.el9eap, 0:7.4.23-3.GA_redhat_00002.1.el7eap, 0:8.6.6-5.redhat_00001.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el7eap, 0:1.2.0-3.redhat_12.1.el8eap, 0:800.6.0-2.GA_redhat_00002.1.el9eap, 0:2.3.14-9.SP10_redhat_00001.1.el8eap, 0:5.4.15-1.Final_redhat_00001.1.el9eap, 0:5.4.15-1.Final_redhat_00001.1.el7eap, 0:2.0.3-1.Final_redhat_00001.1.el8eap, 0:1.0.1-2.Final_redhat_3.1.el9eap, 0:3.5.10-1.redhat_00001.1.el8eap, 0:3.6.23-1.Final_redhat_00001.1.el9eap, 0:2.0.3-1.Final_redhat_00001.1.el9eap, 0:5.1.0-1.Final_redhat_00001.1.el9eap, 0:18.0.19-1.redhat_00002.1.el8sso, 0:8.0.6-5.GA_redhat_00004.1.el8eap, 1:1.0.2-5.redhat_00004.1.el9eap, 0:4.0.1-2.redhat_00001.1.el8eap, 0:7.4.23-3.GA_redhat_00002.1.el9eap, 0:2.2.21-2.redhat_00001.2.el9eap, 0:1.8.0-2.redhat_00002.1.el8eap, 0:2.1.0-3.redhat_00001.1.el8eap, 0:1.9.0-2.redhat_00002.1.el9eap, 0:1.4.0-2.Final_redhat_00001.1.el8eap, 0:3.1.0-3.redhat_00001.1.el8eap, 0:3.0.2-2.redhat_00001.1.el8eap, 0:1.0.0-2.redhat_8.1.el8eap, 35.0.0, 0:8.0.0-3.Final_redhat_00001.1.el8eap, 0:1.0.13-2.redhat_5.1.el9eap, 1:1.0.2-5.redhat_00004.1.el8eap, 0:2.1.214-2.redhat_00001.1.el8eap, 0:2.4.0-3.Final_redhat_00001.1.el8eap, 0:1.8.0-2.redhat_00002.1.el9eap, 0:3.1.0-3.redhat_00001.1.el9eap, 0:4.0.1-2.Final_redhat_00001.1.el8eap, 0:4.0.1-2.Final_redhat_00001.1.el9eap, 0:5.0.0-2.Final_redhat_00001.1.el8eap, 0:1.9.6-1.Final_redhat_00001.1.el7eap, 0:1.5.21-1.Final_redhat_00001.1.el8eap, 0:1.1.0-2.Final_redhat_00001.1.el8eap, 0:1.0.0-2.redhat_8.1.el9eap, 0:7.3.1-1.Final_redhat_00001.1.el8eap, 0:6.4.0-3.redhat_00003.1.el8eap, 0:6.0.23-3.SP2_redhat_00001.1.el9eap, 0:2.1.19-2.Final_redhat_00001.1.el8eap, 0:3.0.4-2.Final_redhat_00001.1.el9eap, 0:6.0.6-2.Final_redhat_00001.1.el8eap, 0:1.5.1-2.Final_redhat_00001.1.el9eap, 0:3.5.10-1.redhat_00001.1.el9eap) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.
Références
- https://access.redhat.com/errata/RHSA-2025:10924
- https://access.redhat.com/errata/RHSA-2025:10925
- https://access.redhat.com/errata/RHSA-2025:10926
- https://access.redhat.com/errata/RHSA-2025:10931
- https://access.redhat.com/errata/RHSA-2025:11636
- https://access.redhat.com/errata/RHSA-2025:11638
- https://access.redhat.com/errata/RHSA-2025:11639
- https://access.redhat.com/errata/RHSA-2025:11640
- https://access.redhat.com/errata/RHSA-2025:11645
- https://access.redhat.com/errata/RHSA-2025:2025
- https://access.redhat.com/errata/RHSA-2025:2026
- https://access.redhat.com/errata/RHSA-2025:2029
- https://access.redhat.com/security/cve/CVE-2024-10234
- https://bugzilla.redhat.com/show_bug.cgi?id=2320848