~ / search / GHSA-7gq2-vwq9-w8vw

GHSA-7gq2-vwq9-w8vw

Eclipse Glassfish URL redirection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-8646

Packages

EcosystemPackageAffectedFixed in
Maven org.glassfish.main.web:web-core < 7.0.10 7.0.10

Details

As written in the advisory (Markdown source, shown as plain text).

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the root context ('/').

References

External links from the advisory. They lead to third-party sites.