A DOM Cross-Site Scripting (XSS) vulnerability exists in the FreeIPA/IdM Web UI password reset page on Red Hat Enterprise Linux 10. This flaw allows an unauthenticated remote attacker to inject and execute arbitrary JavaScript code by enticing a victim to click a specially crafted link and complete the password reset process. Successful exploitation enables the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative compromise if the victim is an IdM administrator. The vulnerability is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). Red Hat has published an advisory describing the issue but has not yet provided an official patch or fix. The recommended mitigation is to restrict access to the IdM Web UI to trusted networks only, typically by configuring firewall rules to limit access to port 443 (HTTPS).

The vulnerability allows an unauthenticated attacker to execute arbitrary JavaScript in the context of a victim's browser session after the victim completes a password reset via a crafted URL. This can lead to unauthorized actions performed with the victim's privileges, including potential full administrative control of the IdM system if an administrator is targeted. Confidentiality and integrity impacts are high, as attackers can steal session cookies, manipulate data, or execute unauthorized commands. Availability is not impacted. The CVSS v3.1 base score is 8.1 (High).

No official patch or fix is currently confirmed by Red Hat. The vendor advisory recommends restricting network access to the FreeIPA/IdM Web UI to trusted networks only. This can be achieved by configuring firewall rules (e.g., using firewalld on RHEL) to limit access to the IdM server's HTTPS port (443) from specific IP addresses or subnets. Ensure firewall changes are persistent and the firewall service is reloaded or restarted to apply changes. Monitor Red Hat's advisory page for updates regarding official fixes.