Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update

Fixed packages 10

Vulnerabilities 11

• Critical 9.6
  CVE-2025-12543

  Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

  A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malici…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  Jan 7, 2026
• High 8.5
  CVE-2025-66412

  Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Tem…

  angular angular katib-suggestion-hyperopt katib-earlystopping Ubuntu Wolfi npm
  Dec 1, 2025
• High 8.2
  CVE-2026-24842

  node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

  node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicio…

  isaacs node-tar katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Alpine Wolfi npm
  Jan 28, 2026
• High 8.1
  CVE-2025-23368

  Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli

  A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Maven
  Mar 4, 2025
• High 7.5
  CVE-2024-29371

  jose4j is vulnerable to DoS via compressed JWE content

  In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memor…

  strimzi-kafka-operator-kafka-thirdparty-libs-cc strimzi-kafka-operator-tracing-agent strimzi-kafka-operator-kafka-agent strimzi-kafka-operator-kafka-init Debian Ubuntu Wolfi Maven
  Dec 17, 2025
• High 7.5
  CVE-2025-9784 Public exploit

  Undertow: undertow madeyoureset http/2 ddos vulnerability

  A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeate…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  Sep 2, 2025
• Medium 6.9
  CVE-2025-13465 Public exploit

  Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

  The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their ori…

  lodash lodash lodash-es lodash-amd Debian Ubuntu Wolfi npm
  Jan 21, 2026
• Medium 6.9
  CVE-2026-1002

  Eclipse Vert.x Web static handler file access denial

  The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI. The issue comes from an improper implementation of the C. rule of section 5.2.4 of RFC3986 and is…

  Eclipse Vert.x Eclipse Vert.x druid keycloak-26.5-iamguarded-compat Wolfi Maven
  Jan 15, 2026
• Medium 5.9
  CVE-2025-23184

  Apache CXF: Denial of Service vulnerability with temporary files

  A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies …

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Jan 21, 2025
• Low 3.7
  CVE-2025-15284

  arrayLimit bypass in bracket notation allows DoS via memory exhaustion

  Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation (a[]=1&a[]=2), only for indexed notation (a[0]=1). This is a consist…

  langfuse-3-worker katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Wolfi npm
  Dec 29, 2025
• Low 2.9
  CVE-2025-69873

  ajv has ReDoS when using `$data` option

  ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to t…

  ajv.js ajv langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  Feb 11, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html/7.3.0_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2339095
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2408784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423194
• article
  https://issues.redhat.com/browse/JBEAP-31703
• article
  https://issues.redhat.com/browse/JBEAP-33004
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33371.json
• report
  https://access.redhat.com/security/cve/CVE-2024-29371
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-29371
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-29371
• article
  https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack
• report
  https://access.redhat.com/security/cve/CVE-2025-9784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-9784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-9784
• article
  https://github.com/undertow-io/undertow/pull/1778
• article
  https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final
• article
  https://issues.redhat.com/browse/UNDERTOW-2598
• article
  https://kb.cert.org/vuls/id/767506
• report
  https://access.redhat.com/security/cve/CVE-2025-12543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-12543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-12543
• report
  https://access.redhat.com/security/cve/CVE-2025-13465
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2431740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-13465
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-13465
• article
  https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
• report
  https://access.redhat.com/security/cve/CVE-2025-15284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2425946
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-15284
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-15284
• article
  https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9
• article
  https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p
• report
  https://access.redhat.com/security/cve/CVE-2025-23184
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-23184
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-23184