{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/29226?format=json","vulnerability_id":"VCID-zufu-x8dx-xygs","summary":"Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store\n# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-f7jh-m6wp-jm7f. This link is maintained to preserve external references.\n\n# Original Description\n\nA flaw was found in the JBoss EAP Management Console, where a stored Cross-site scripting vulnerability occurs when an application improperly sanitizes user input before storing it in a data store. When this stored data is later included in web pages without adequate sanitization, malicious scripts can execute in the context of users who view these pages, leading to potential data theft, session hijacking, or other malicious activities.","aliases":[{"alias":"GHSA-hp88-hfjw-2hg4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/70094?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.11.Final","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.11.Final"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/737035?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.0.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.0.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737036?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.1.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.1.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737037?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.2.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.2.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737038?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.3.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.3.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737039?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.4.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.4.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737040?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.5.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.5.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737041?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.6.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.6.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737042?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.7.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.7.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737043?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.8.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.8.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737044?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.9.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.9.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737045?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.10.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.10.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737046?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.11.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.11.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737047?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.5.12.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.12.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737048?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.0.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.0.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737049?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.1.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.1.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737050?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.2.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.2.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737051?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.3.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.3.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737052?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.4.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.4.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737053?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.5.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.5.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737054?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.6.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.6.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737055?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.7.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.7.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737056?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.8.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.8.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737057?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.9.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.9.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737058?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.10.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.10.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737059?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.11.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.11.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737060?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.12.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.12.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737061?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.13.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.13.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737062?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.14.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.14.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737063?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.15.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.15.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737064?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.16.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.16.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737065?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.17.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.17.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737066?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.18.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.18.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737067?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.19.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.19.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737068?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.20.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.20.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737069?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.21.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.21.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737070?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.22.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.22.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737071?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.23.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.23.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737072?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.24.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.24.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737073?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.6.27.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.27.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737074?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.0.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.0.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737075?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.4.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.4.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737076?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.5.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.5.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/737077?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.6.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-gkqy-w15q-jud2"},{"vulnerability":"VCID-w155-te58-v3fy"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.6.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/51166?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.7.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5du4-1bus-huhv"},{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.7.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/742078?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.8.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.8.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/756552?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.9.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.9.Final"},{"url":"http://public2.vulnerablecode.io/api/packages/756553?format=json","purl":"pkg:maven/org.jboss.hal/hal-console@3.7.10.Final","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8ew2-s4a9-u7cu"},{"vulnerability":"VCID-zufu-x8dx-xygs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.10.Final"}],"references":[{"reference_url":"https://access.redhat.com/security/cve/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2025-2901"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355685","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355685"},{"reference_url":"https://github.com/hal/console","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/hal/console"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901"},{"reference_url":"https://github.com/advisories/GHSA-hp88-hfjw-2hg4","reference_id":"GHSA-hp88-hfjw-2hg4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hp88-hfjw-2hg4"}],"weaknesses":[{"cwe_id":79,"name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zufu-x8dx-xygs"}