CVE-2024-9343

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints

In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9408 Source advisory:...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...

GHSA-F7H5-C625-3795 Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints

In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints...

org.glassfish.main.featuresets:glassfish (6.0.0-rc3), org.glassfish.main.featuresets:web (6.0.0-rc3) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc3 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10029 Source advisory:...

org.glassfish.main.distributions:glassfish (>=4.0-b90, <=4.0), org.glassfish.main.distributions:web (>=4.0-b90, <=4.0) +4 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (>=4.0-b90, <=9.0.0-m3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version =4.0-b90, =4.0-b90, =4.0-b90, =6.2.5, =4.1, =4.1, =4.0-b90, =5.0 Source cves: CVE-2024-10029 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMINGUI-10946539...

org.glassfish.main.distributions:glassfish (4.0), org.glassfish.main.distributions:web (4.0) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.0)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.distributions:glassfish 4.0 -...

org.glassfish.main.featuresets:glassfish (5.1.0-rc2), org.glassfish.main.featuresets:web (5.1.0-rc2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.1.0-rc2 -...

org.glassfish.main.featuresets:glassfish (5.0.1), org.glassfish.main.featuresets:web (5.0.1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.0.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.0.1 -...

org.glassfish.main.distributions:glassfish (4.0-b90), org.glassfish.main.distributions:web (4.0-b90) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.0-b90)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.distributions:glassfish 4.0-b90 -...

GHSA-62G9-99M7-W8WV Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.featuresets:glassfish (6.0.0-rc2), org.glassfish.main.featuresets:web (6.0.0-rc2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc2 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc4), org.glassfish.main.featuresets:web (6.0.0-rc4) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc4)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc4 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc1), org.glassfish.main.featuresets:web (6.0.0-rc1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc1 -...

org.glassfish.main.featuresets:glassfish (6.2.2), org.glassfish.main.featuresets:web (6.2.2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.2 -...

org.glassfish.main.featuresets:glassfish (6.2.4), org.glassfish.main.featuresets:web (6.2.4) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.4)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.4 -...

org.glassfish.main.featuresets:glassfish (6.2.1), org.glassfish.main.featuresets:web (6.2.1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.1 -...

org.glassfish.main.featuresets:glassfish (4.1.1), org.glassfish.main.featuresets:web (4.1.1) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.1 -...