org.glassfish.fighterfish:osgi-http (1.0.8), org.glassfish.main.appclient:gf-client (4.1.2) +21 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (4.1.2)

org.glassfish.main.web:web-core MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.fighterfish:osgi-http 1.0.8 - org.glassfish.main.appclient:gf-client 4.1.2 -...

org.glassfish.main.appclient:gf-client (5.0.1), org.glassfish.main.appclient:gf-client-module (5.0.1) +15 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (5.0.1)

org.glassfish.main.web:web-core MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 5.0.1 - org.glassfish.main.appclient:gf-client-module 5.0....

org.glassfish.main.security:websecurity (4.0-b33) potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (4.0-b33)

org.glassfish.main.web:web-core MAVEN version 4.0-b33 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.security:websecurity 4.0-b33 Source cves: CVE-2024-8646 Source advisory:...

CVE-2024-8646: URL Redirection to Untrusted Site

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...