medium4.5
CVE-2024-10029
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console
Impact
In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.glassfish.main.admingui:console-common | <= 7.0.25 | none recorded |
| maven | org.glassfish.main.admingui:console-cluster-plugin | <= 7.0.25 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Glassfish | Version 7.0.15 |