Lucene search

PRIOn knowledge basePRION:CVE-2023-5763

HistoryNov 03, 2023 - 7:15 a.m.

Code injection

2023-11-0307:15:00

PRIOn knowledge base

www.prio-n.com

eclipse glassfish

remote attackers

malicious code

orb listeners

security vulnerability

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.9%

JSON

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

CPENameOperatorVersion
glassfishge5.0.0
glassfishle6.2.5

CPE	Name	Operator	Version
	glassfish	ge	5.0.0
	glassfish	le	6.2.5

References

gitlab.eclipse.org/security/cve-assignement/-/issues/14

glassfish.org/docs/latest/security-guide.html