medium6.1
CVE-2024-9343
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
Impact
In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.glassfish.main.admingui:console-common | <= 7.0.25 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Glassfish | Version 7.0.15 |