CVE-2025-12799: XSS in Jastow (and Undertow) via unescaped URL chars
CVE-2025-12799 Published on July 7, 2026
Jastow: jastow cross-site scripting attack due to unsanitized uri
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.
Vulnerability Analysis
CVE-2025-12799 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a high impact on integrity, and no impact on availability.
Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
HIGH
Availability Impact:
NONE
Timeline
Reported to Red Hat.
Made public. 243 days later.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2025-12799 has been classified to as a XSS vulnerability or weakness.
Products Associated with CVE-2025-12799
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
Red Hat JBoss Enterprise Application Platform 8.1: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10:- Version 0:1-9.el10eap and below * is unaffected.
- Version 0:2.40.0-7.redhat_00015.1.el10eap and below * is unaffected.
- Version 1:2.0.0-2.redhat_00005.1.el10eap and below * is unaffected.
- Version 0:1.8.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.4.0-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.3.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.5-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.3-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.13.2-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.11.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.9.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.17.2-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.2.2-28.redhat_2.1.el10eap and below * is unaffected.
- Version 0:2.16.1-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:3.18.0-2.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:4.0.10-3.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.1.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:0.8.12-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.14.0-4.redhat_00003.1.el10eap and below * is unaffected.
- Version 1:2.0.0-2.redhat_00005.1.el10eap and below * is unaffected.
- Version 0:2.0.4-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:0.1.0-2.redhat_00010.1.el10eap and below * is unaffected.
- Version 0:2.0.1-5.redhat_00007.1.el10eap and below * is unaffected.
- Version 0:2.30.32-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:8.6.6-5.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.84.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.14.18-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.8-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.0.0-2.Final_redhat_1.1.el10eap and below * is unaffected.
- Version 0:1.2.5-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:801.7.0-1.GA_redhat_00001.1.el10eap and below * is unaffected.
- Version 1:3.33.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:6.10.1.202505221210-1.r_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:8.15.4-4.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:4.1.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.0.1-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:5.0.0-6.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.1-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.2.0-4.redhat_00007.1.el10eap and below * is unaffected.
- Version 0:1.1.0-4.redhat_00007.1.el10eap and below * is unaffected.
- Version 0:1.0.13-4.redhat_5.1.el10eap and below * is unaffected.
- Version 0:2.10.1-2.redhat_00005.1.el10eap and below * is unaffected.
- Version 0:1.0.3-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:33.0.0-3.jre_redhat_00004.1.el10eap and below * is unaffected.
- Version 0:2.2.224-4.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:3.7.19-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:6.6.50-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:7.0.3-3.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:7.2.6-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:8.0.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.4.11-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:0.10.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.1.5-4.redhat_00006.1.el10eap and below * is unaffected.
- Version 0:4.5.14-5.redhat_00016.1.el10eap and below * is unaffected.
- Version 0:4.4.16-6.redhat_00011.1.el10eap and below * is unaffected.
- Version 0:15.0.21-1.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.1.3-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.1.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.18-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.18.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.8.0-3.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.18.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.1.4-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.1-5.redhat_00005.1.el10eap and below * is unaffected.
- Version 0:3.0.0-3.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.0-3.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.1-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:4.0.1-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.2-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.3-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.0.1-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.0-5.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:3.1.0-4.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:1.1.6-5.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.1.3-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.1.3-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.1.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:6.0.0-6.redhat_00007.1.el10eap and below * is unaffected.
- Version 0:3.1.1-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.2-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.1-3.redhat_00004.1.el10eap and below * is unaffected.
- Version 0:3.0.2-3.redhat_00006.1.el10eap and below * is unaffected.
- Version 0:2.1.1-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.0-5.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:4.0.4-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.2.7-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.4.1-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.9.3-4.redhat_00004.1.el10eap and below * is unaffected.
- Version 0:1.6.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.0-4.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:3.0.3-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.2.3-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:6.0.0-8.el10eap and below * is unaffected.
- Version 0:4.0.6-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.1-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.4.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.1.3-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.3.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.1-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.7.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.4.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.0.8-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.0.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.0-3.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.1-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.6.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.19-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.2.3-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:16.1.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.6-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.5.5-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:10.1.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.0.31-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.0-3.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.1.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.5.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:8.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.3.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.0.0-4.SP3_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.1.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:7.3.8-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.0.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.8.16-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.0.0-3.redhat_00009.1.el10eap and below * is unaffected.
- Version 0:4.0.6-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 1:5.3.23-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.2-1.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.0.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.12.7-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:0.9.6-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:4.0.11-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.1-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.9.0-3.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.0.1-1.Final_redhat_3.1.el10eap and below * is unaffected.
- Version 0:2.23.1-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.0.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:9.11.1-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:7.1.2-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.2.1-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:4.1.132-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.1.132-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:0.1.10-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:9.37.3-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:9.7.1-3.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:4.3.2-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.1.7-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.4.0-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.6.1-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.0.3-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:5.0.14-2.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.0.4-4.redhat_00005.1.el10eap and below * is unaffected.
- Version 0:3.1.12-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.2.21-5.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.2.0-2.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:6.2.15-1.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.0.1-3.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.2.0-3.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.4-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:8.0.0-6.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.17-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.0.2-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.3.0-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:4.2.2-2.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.1.0-3.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:1.5.0-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:4.1.2-2.redhat_00003.1.el10eap and below * is unaffected.
- Version 0:2.3.24-4.SP3_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.2.9-1.SP1_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.1.6-3.redhat_1.1.el10eap and below * is unaffected.
- Version 0:2.3.0-7.redhat_00010.1.el10eap and below * is unaffected.
- Version 0:5.1.6-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:8.1.7-4.GA_redhat_00003.1.el10eap and below * is unaffected.
- Version 0:1.0.1-4.Final_redhat_00002.1.el10eap and below * is unaffected.
- Version 0:5.0.12-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:1.7.0-2.Final_redhat_00003.1.el10eap and below * is unaffected.
- Version 0:1.3.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.6.9-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.1.4-2.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.1.4-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:8.1.1-11.GA_redhat_00019.1.el10eap and below * is unaffected.
- Version 0:2.0.1-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.3.0-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:2.3.0-1.Final.redhat.00001.1.el10eap and below * is unaffected.
- Version 0:3.0.5-1.Final_redhat_00001.1.el10eap and below * is unaffected.
- Version 0:7.0.0-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:2.3.0-2.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.6.3-5.redhat_00008.1.el10eap and below * is unaffected.
- Version 0:3.0.4-1.redhat_00002.1.el10eap and below * is unaffected.
- Version 0:1.2.0-2.redhat_12.1.el10eap and below * is unaffected.
- Version 0:3.0.5-1.redhat_00001.1.el10eap and below * is unaffected.
- Version 0:3.0.4-5.redhat_00007.1.el10eap and below * is unaffected.
- Version 0:4.0.10-3.redhat_00001.1.el8eap and below * is unaffected.
- Version 0:2.0.4-1.Final_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:801.7.0-1.GA_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:6.6.50-1.Final_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:7.3.8-1.Final_redhat_00001.1.el8eap and below * is unaffected.
- Version 1:5.3.23-1.Final_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:2.3.24-4.SP3_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:2.2.9-1.SP1_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:8.1.7-4.GA_redhat_00003.1.el8eap and below * is unaffected.
- Version 0:2.6.9-1.Final_redhat_00001.1.el8eap and below * is unaffected.
- Version 0:8.1.1-11.GA_redhat_00019.1.el8eap and below * is unaffected.
- Version 0:4.0.10-3.redhat_00001.1.el9eap and below * is unaffected.
- Version 0:2.0.4-1.Final_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:801.7.0-1.GA_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:6.6.50-1.Final_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:7.3.8-1.Final_redhat_00001.1.el9eap and below * is unaffected.
- Version 1:5.3.23-1.Final_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:2.3.24-4.SP3_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:2.2.9-1.SP1_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:8.1.7-4.GA_redhat_00003.1.el9eap and below * is unaffected.
- Version 0:2.6.9-1.Final_redhat_00001.1.el9eap and below * is unaffected.
- Version 0:8.1.1-11.GA_redhat_00019.1.el9eap and below * is unaffected.