GitHub Advisoryadvisory · Maven
GHSA-62g9-99m7-w8wv Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
MEDIUM
Official page ↗
- Aliases
- CVE-2024-10032
- Ecosystem
- Maven
- Packages
- org.glassfish.main.admingui:console-cluster-plugin
- Severity
- Moderate
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N
- Weaknesses
- CWE-79
- Reviewed
- 2025-07-18
Affected packages
• Maven org.glassfish.main.admingui:console-cluster-plugin: <= 7.0.25 (no fix yet)
Description
In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console.
Related
Alias · CVE (1)
- CVE-2024-10032 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness