GitHub Advisoryadvisory · Maven
GHSA-f7h5-c625-3795 Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
HIGH
Official page ↗
- Aliases
- CVE-2024-9408
- Ecosystem
- Maven
- Packages
- org.glassfish.main.admingui:console-common
- Severity
- High
- CVSS vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
- Weaknesses
- CWE-918
- Reviewed
- 2025-07-18
Affected packages
• Maven org.glassfish.main.admingui:console-common: <= 6.2.5 (no fix yet)
Description
In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints.
Related
Alias · CVE (1)
- CVE-2024-9408 In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints. vulnerability
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness