This vulnerability in wildfly-core allows a remote authenticated administrative user to perform XML injection (Blind XPath Injection) by injecting a malformed payload into the Inet Address field through the Management Model. The injected payload is written into the standalone.xml configuration file, causing the server to crash and become unrecoverable. Exploitation results in denial of service requiring manual recovery. The vulnerability requires high privileges (administrative user) and does not impact confidentiality or integrity but has a high availability impact. The vendor advisory recommends restricting network access to the management interface and limiting administrative user credentials as mitigation. No official patch or remediation level is currently stated in the advisory.

Successful exploitation leads to denial of service by crashing the server and corrupting the standalone.xml configuration file, requiring manual intervention to restore operation. The impact is availability loss only. Confidentiality and integrity are not affected. The vulnerability requires authenticated administrative privileges, limiting the attack surface to trusted users with management access.

No official patch or fix is currently confirmed for this vulnerability. The vendor advisory recommends restricting network access to the WildFly management interface to trusted hosts only by configuring firewall rules to limit inbound connections to the management port (e.g., 9990) from authorized IP addresses or subnets. Additionally, ensure that only necessary and trusted administrative users have credentials for the management console. Example firewall rules using firewalld on Red Hat Enterprise Linux are provided in the advisory. These mitigations reduce the risk by limiting who can access the administrative interface. Note that applying firewall rules may impact legitimate remote management operations if not configured correctly.