CVE-2024-9329 Glassfish redirect to untrusted site

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

Eclipse GlassFish 输入验证错误漏洞

Eclipse GlassFish is an open source application server from the Eclipse Foundation. An input validation error vulnerability exists in Eclipse GlassFish versions prior to 7.0.17, which stems from a Host HTTP parameter that may cause a web application to redirect to a specified URL when the request...

Eclipse Glassfish URL redirection vulnerability

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

GHSA-7GQ2-VWQ9-W8VW Eclipse Glassfish URL redirection vulnerability

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

CVE-2024-8646

CVE-2024-8646 — Eclipse GlassFish prior to 7.0.10 suffers a URL redirection vulnerability to untrusted sites. The flaw stems from CVE-2023-41080 embedded in the Apache code used by GlassFish and only affects applications deployed to the root context ‘/’. Public details in the connected documents ...

CVE-2024-8646 Eclipse Glassfish: URL redirection vulnerability to untrusted sites

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

CVE-2024-8646 Eclipse Glassfish: URL redirection vulnerability to untrusted sites

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

CVE-2024-8646 Eclipse Glassfish: URL redirection vulnerability to untrusted sites

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

Eclipse Glassfish 安全漏洞

Eclipse GlassFish is an open source application server from the Eclipse Foundation. A security vulnerability exists in Eclipse Glassfish versions prior to 7.0.10 that stems from the presence of a URL redirection vulnerability that points to an untrusted site...

PT-2024-7963 · Eclipse +1 · Eclipse Glassfish +1

Name of the Vulnerable Software and Affected Versions: Eclipse Glassfish versions prior to 7.0.10 Description: A URL redirection issue to untrusted sites exists, caused by a vulnerability in the included Apache code. This issue only affects applications explicitly deployed to the root context '/'...

The vulnerability of the Eclipse Glassfish application server arises from insufficient validation of input data, allowing attackers to load malicious code onto the server.

The vulnerability of the Eclipse Glassfish application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to upload malicious code to the server remotely...

GHSA-2MW4-WJ8C-7F93 Eclipse Glassfish remote code execution issue

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

Eclipse Glassfish remote code execution issue

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

CVE-2023-5763

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

Code injection

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

CVE-2023-5763

CVE-2023-5763 affects Eclipse Glassfish 5 and 6 when running on older JDKs (below 6u211, 7u201, or 8u191). The issue enables remote code loading via insecure ORB listeners, with Veracode describing RCE via specially crafted RMI requests to a vulnerable Glassfish server. The root cause is the use ...

CVE-2023-5763 Glassfish remote code execution

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

CVE-2023-5763 Glassfish remote code execution

In Eclipse Glassfish 5 or 6, running with old versions of JDK lower than 6u211, or 7u201, or 8u191, allows remote attackers to load malicious code on the server via access to insecure ORB listeners...

Eclipse Glassfish Security Vulnerability

Eclipse GlassFish is an open source application server from the Eclipse Foundation. A security vulnerability exists in Eclipse Glassfish versions 5 and 6, which stems from the use of older versions of the JDK versions prior to 6u211, prior to 7u201, and prior to 8u191, and can be exploited by an...

PT-2023-7311 · Oracle +1 · Jdk +1

Name of the Vulnerable Software and Affected Versions: Eclipse Glassfish versions 5 or 6 Description: The issue exists due to insufficient input validation, allowing a remote attacker to load malicious code on the server. This can be achieved via access to insecure ORB listeners when running with...