6 matches found
org.glassfish.jersey.containers.glassfish:jersey-gf-ejb (>=2.29, <=5.0.0-m1), org.glassfish.main.admin:rest-service (>=6.2.4, <=7.0.0-m10) +21 more potentially affected by CVE-2023-5763 via org.glassfish.main.orb:orb-connector (>=5.0, <=7.0.0-m10)
org.glassfish.main.orb:orb-connector MAVEN version =5.0, =2.29, =6.2.4, =5.0.1, =5.0.1, =5.0.1, =5.0, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =6.2.5, =5.0.1, =5.0.1, =5.0, =7.0.0-m10 and more Source cves: CVE-2023-5763 Source advisory: OSV:GHSA-2MW4-WJ8C-7F93...
org.glassfish.jersey.containers.glassfish:jersey-gf-ejb (>=2.29, <=5.0.0-m1), org.glassfish.main.admin:rest-service (>=6.2.4, <=7.0.0-m10) +21 more potentially affected by CVE-2023-5763 via org.glassfish.main.orb:orb-connector (>=5.0, <=7.0.0-m10)
org.glassfish.main.orb:orb-connector MAVEN version =5.0, =2.29, =6.2.4, =5.0.1, =5.0.1, =5.0.1, =5.0, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =6.2.5, =5.0.1, =5.0.1, =5.0, =7.0.0-m10 and more Source cves: CVE-2023-5763 Source advisory: GHSA-2MW4-WJ8C-7F93...
CVE-2023-5763
In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...
CVE-2023-5763
CVE-2023-5763 affects Eclipse Glassfish 5 and 6 when running on older JDKs (below 6u211, 7u201, or 8u191). The issue enables remote code loading via insecure ORB listeners, with Veracode describing RCE via specially crafted RMI requests to a vulnerable Glassfish server. The root cause is the use ...
CVE-2023-5763 Glassfish remote code execution
In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...
org.glassfish.jersey.containers.glassfish:jersey-gf-ejb (>=2.29, <=5.0.0-m1), org.glassfish.main.admin:rest-service (>=6.2.4, <=7.0.0-m10) +21 more potentially affected by CVE-2023-5763 via org.glassfish.main.orb:orb-connector (>=5.0, <=7.0.0-m10)
org.glassfish.main.orb:orb-connector MAVEN version =5.0, =2.29, =6.2.4, =5.0.1, =5.0.1, =5.0.1, =5.0, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =6.2.5, =5.0.1, =5.0.1, =5.0, =7.0.0-m10 and more Source cves: CVE-2023-5763 Source advisory: MEND:CVE-2023-5763...