CVE-2024-9408 In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific…

Description

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Eclipse Glassfish	6.2.5	Pas de correctif indiqué

Autres CVE de Eclipse Glassfish

Les 12 CVE de Eclipse Glassfish →

CVE-2026-12605 In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin… 9.6 Critique CVE-2026-12606 Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's… 6.3 Moyenne CVE-2026-2586 An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console 9.1 Critique CVE-2026-2587 A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used… 9.6 Critique