Skip to content
fr Sign in
6.9 Medium

CVE-2024-9329 In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to…

Description

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.

Affected products and versions

Product Affected versions Fixed in
Glassfish 5.1 5.1.0 → 7.0.16 No fix stated
glassfish 5.1 5.1.0 → 7.0.16 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Glassfish

The 2 CVEs of Glassfish →
CVE-2023-5763 In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows… 6.8 Medium
Track this CVE