CVE-2021-3536: Red Hat Build Of Quarkus

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.

Affected products

• Red Hat Build Of Quarkus: affected versions not specified
• Red Hat Data Grid: version 8.0 only
• Red Hat Descision Manager: version 7.0 only
• Red Hat Integration Camel K: affected versions not specified
• Red Hat Integration Camel Quarkus: affected versions not specified
• Red Hat Integration Service Registry: affected versions not specified
• Red Hat JBoss A-Mq: version 7 only
• Red Hat JBoss Enterprise Application Platform: version 7.0 only
• Red Hat Wildfly: before 23.0.2 (fixed in 23.0.2)

Published 2021-05-20. Last modified 2026-06-17.