~ / search / GHSA-vqrm-83g6-pfv4

GHSA-vqrm-83g6-pfv4

Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-10029

Packages

EcosystemPackageAffectedFixed in
Maven org.glassfish.main.admingui:console-common <= 7.0.25 no fix listed
Maven org.glassfish.main.admingui:console-cluster-plugin <= 7.0.25 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console.

References

External links from the advisory. They lead to third-party sites.