org.glassfish.main.featuresets:glassfish (6.0.0-rc4), org.glassfish.main.featuresets:nucleus (6.0.0-rc4) +1 more potentially affected by CVE-2024-9329 via org.glassfish.main.admin:rest-service (6.0.0-rc4)

org.glassfish.main.admin:rest-service MAVEN version 6.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admin:rest-service and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc4 -...

org.glassfish.main.featuresets:glassfish (5.0.1), org.glassfish.main.featuresets:nucleus (5.0.1) +1 more potentially affected by CVE-2024-9329 via org.glassfish.main.admin:rest-service (5.0.1)

org.glassfish.main.admin:rest-service MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admin:rest-service and may be impacted: - org.glassfish.main.featuresets:glassfish 5.0.1 - org.glassfish.main.featuresets:nucle...

CVE-2024-9329

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

CVE-2024-9329 Glassfish redirect to untrusted site

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

CVE-2024-9329

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

CVE-2024-9329

CVE-2024-9329 affects Eclipse GlassFish prior to 7.0.17. The Host HTTP parameter at the /management/domain endpoint can cause the web application to redirect to an attacker‑controlled URL, enabling phishing and potential credential theft. The reports indicate an Open Redirect risk tied to this pa...

CVE-2024-9329 Glassfish redirect to untrusted site

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

CVE-2024-9329 Glassfish redirect to untrusted site

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

PT-2024-39578 · Eclipse · Eclipse Glassfish

Name of the Vulnerable Software and Affected Versions: Eclipse Glassfish versions prior to 7.0.17 Description: The Host HTTP parameter could cause the web application to redirect to the specified URL when the requested endpoint is "/management/domain". By modifying the URL value to a malicious...

CVE-2024-9329: Improper Handling of Parameters

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal...

Eclipse GlassFish: Input validation error vulnerability

Eclipse GlassFish is an open source application server from the Eclipse Foundation. An input validation error vulnerability exists in Eclipse GlassFish versions prior to 7.0.17, which stems from a Host HTTP parameter that may cause a web application to redirect to a specified URL when the request...

URL Redirection

org.glassfish.main.web:web-core is vulnerable to a URL Redirection. The vulnerability is due to untrusted URL redirection capabilities in the Apache code included in GlassFish, affecting applications deployed to the root context '/'. It allows an attacker to redirect users to untrusted or malicio...

org.glassfish.main.appclient:gf-client (4.0-b90), org.glassfish.main.appclient:gf-client-module (4.0-b90) +20 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (4.0-b90)

org.glassfish.main.web:web-core MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 4.0-b90 - org.glassfish.main.appclient:gf-client-module...

GHSA-7GQ2-VWQ9-W8VW Eclipse Glassfish URL redirection vulnerability

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

org.glassfish.main.appclient:gf-client (6.0.0-rc3), org.glassfish.main.appclient:gf-client-module (6.0.0-rc3) +14 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (6.0.0-rc3)

org.glassfish.main.web:web-core MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 6.0.0-rc3 -...

org.glassfish.main.appclient:gf-client (6.1.0), org.glassfish.main.appclient:gf-client-module (6.1.0) +14 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (6.1.0)

org.glassfish.main.web:web-core MAVEN version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 6.1.0 - org.glassfish.main.appclient:gf-client-module 6.1....

org.glassfish.main.appclient:gf-client (6.0.0-rc1), org.glassfish.main.appclient:gf-client-module (6.0.0-rc1) +14 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (6.0.0-rc1)

org.glassfish.main.web:web-core MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 6.0.0-rc1 -...

Eclipse Glassfish URL redirection vulnerability

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

CVE-2024-8646

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...

CVE-2024-8646

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the ro...