{"url":"http://public2.vulnerablecode.io/api/packages/377921?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.11.Final","type":"maven","namespace":"org.jboss.hal","name":"hal-console","version":"3.7.11.Final","qualifiers":{},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/360693?format=json","vulnerability_id":"VCID-72hj-h1d9-x7dp","summary":"Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store\n# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-f7jh-m6wp-jm7f. This link is maintained to preserve external references.\n\n# Original Description\n\nA flaw was found in the JBoss EAP Management Console, where a stored Cross-site scripting vulnerability occurs when an application improperly sanitizes user input before storing it in a data store. When this stored data is later included in web pages without adequate sanitization, malicious scripts can execute in the context of users who view these pages, leading to potential data theft, session hijacking, or other malicious activities.","references":[{"reference_url":"https://access.redhat.com/security/cve/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2025-2901"},{"reference_url":"https://github.com/hal/console","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901"},{"reference_url":"https://github.com/advisories/GHSA-hp88-hfjw-2hg4","reference_id":"GHSA-hp88-hfjw-2hg4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hp88-hfjw-2hg4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/377921?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.11.Final","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.11.Final"}],"aliases":["GHSA-hp88-hfjw-2hg4"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-72hj-h1d9-x7dp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/125945?format=json","vulnerability_id":"VCID-md6z-u4cu-eybz","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-2901.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-2901.json"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2025-2901"},{"reference_url":"https://github.com/hal/console","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console"},{"reference_url":"https://github.com/hal/console/commit/216de3b8aa82ea92df10cc296d88c68467cf2c52","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console/commit/216de3b8aa82ea92df10cc296d88c68467cf2c52"},{"reference_url":"https://github.com/hal/console/releases/tag/v3.7.11","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console/releases/tag/v3.7.11"},{"reference_url":"https://github.com/hal/console/security/advisories/GHSA-f7jh-m6wp-jm7f","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console/security/advisories/GHSA-f7jh-m6wp-jm7f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355685","reference_id":"2355685","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355685"},{"reference_url":"https://github.com/advisories/GHSA-f7jh-m6wp-jm7f","reference_id":"GHSA-f7jh-m6wp-jm7f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f7jh-m6wp-jm7f"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10452","reference_id":"RHSA-2025:10452","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10452"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10453","reference_id":"RHSA-2025:10453","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10453"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10459","reference_id":"RHSA-2025:10459","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10459"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10924","reference_id":"RHSA-2025:10924","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10924"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10925","reference_id":"RHSA-2025:10925","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10925"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10926","reference_id":"RHSA-2025:10926","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10926"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10931","reference_id":"RHSA-2025:10931","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10931"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/377921?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.11.Final","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.11.Final"}],"aliases":["CVE-2025-2901","GHSA-f7jh-m6wp-jm7f"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-md6z-u4cu-eybz"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.11.Final"}