~ / search / GHSA-mqxx-c43h-jj9v

GHSA-mqxx-c43h-jj9v

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-9343

Packages

EcosystemPackageAffectedFixed in
Maven org.glassfish.main.admingui:console-common <= 7.0.25 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console.

References

External links from the advisory. They lead to third-party sites.