critical9.8
CVE-2024-9408
Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
Impact
In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.glassfish.main.admingui:console-common | <= 6.2.5 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Glassfish | Version 6.2.5 |