GHSA-hp97-5x6g-q538
Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.glassfish.main.admingui:console-common | <= 7.0.25 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system.
References
External links from the advisory. They lead to third-party sites.