medium5.8
CVE-2024-10031
Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications
Impact
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.glassfish.main.admingui:console-common | <= 7.0.25 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Glassfish | Version 7.0.15 |