Executive Summary

CVE-2024-10234 exposes a cross‑site scripting flaw in Wildfly’s deployment system, enabling an attacker or insider to inject and execute malicious payloads during deployment. This can lead to unauthorized code execution, data exfiltration, or service disruption on the affected server.

---

Authoritative CVE Metadata - CVSS Base Score: 6.1 (MEDIUM) - Published: 2024-10-22T14:15:14.573 - Last Modified: 2026-08-19T01:16:52.977

Original Description: A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

"Do not turn back when you are just at the goal."

— Publilius Syrus