org.glassfish.main.featuresets:glassfish (4.1), org.glassfish.main.featuresets:web (4.1) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1 -...

org.glassfish.main.featuresets:glassfish (4.1.1), org.glassfish.main.featuresets:web (4.1.1) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.1 -...

org.glassfish.main.featuresets:glassfish (5.0.1), org.glassfish.main.featuresets:web (5.0.1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.0.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.0.1 -...

org.glassfish.main.featuresets:glassfish (5.1.0-rc2), org.glassfish.main.featuresets:web (5.1.0-rc2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.1.0-rc2 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc3), org.glassfish.main.featuresets:web (6.0.0-rc3) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc3 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc4), org.glassfish.main.featuresets:web (6.0.0-rc4) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc4)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc4 -...

org.glassfish.main.featuresets:glassfish (6.0.0), org.glassfish.main.featuresets:web (6.0.0) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2) +6 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (3.1.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2 -...

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious payloads through user-controllable input fields. Details Cross-site scripting o...

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious input that is later rendered without proper sanitization. Details Cross-site...

org.glassfish.main.featuresets:glassfish (6.2.0), org.glassfish.main.featuresets:web (6.2.0) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.0)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.0 -...

Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2.2) +6 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (3.1.2.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2.2 -...

org.glassfish.main.admingui:console-cluster-plugin (6.2.5), org.glassfish.main.admingui:console-common-full-plugin (6.2.5) +10 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.2.5)

org.glassfish.main.admingui:console-common MAVEN version 6.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.5 -...

GHSA-62G9-99M7-W8WV Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.admingui:console-cluster-plugin (>=7.0.0-m1, <=7.0.25), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=7.0.25) +11 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=7.0.0-m1, <=7.0.25)

org.glassfish.main.admingui:console-common MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.16, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.25 Source cves: CVE-2024-10029 Source advisory: OSV:GHSA-VQRM-83G6-PFV4...

org.glassfish.main.featuresets:glassfish (4.1.2), org.glassfish.main.featuresets:web (4.1.2) +1 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (4.1.2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.2 -...

org.glassfish.main.admingui:console-cluster-plugin (6.1.0), org.glassfish.main.admingui:console-common-full-plugin (6.1.0) +9 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (6.1.0)

org.glassfish.main.admingui:console-common MAVEN version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.1.0 -...