CVE:CVE-2021-3536
CNNVD:CNNVD-202105-1302
Red Hat Wildfly是美国红帽（Red Hat）公司的一款基于JavaEE的轻量级开源应用服务器。
Wildfly 23.0.2.Final之前版本存在跨站脚本漏洞，该漏洞源于当通过管理控制台在域模式中创建新角色时，可以在name字段中添加有效负载，从而导致XSS。
solution:Upgrade redhat build_of_quarkus to a higher version than -; Upgrade redhat data_grid to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat descision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat integration_camel_k to a higher version than -; Upgrade redhat integration_camel_quarkus to a higher version than -; Upgrade redhat integration_service_registry to a higher version than -; Upgrade redhat jboss_a-mq to a higher version than 7,and avoid the version 7; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat wildfly to a higher version than 23.0.2,and avoid the version (,23.0.2)