CVE-2024-10029

Description

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console.

Affected packages (2)

• Maven/org.glassfish.main.admingui:console-cluster-pluginfrom 0, <= 7.0.25
• Maven/org.glassfish.main.admingui:console-commonfrom 0, <= 7.0.25

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-10029
• PATCHhttps://github.com/eclipse-ee4j/glassfish
• WEBhttps://gitlab.eclipse.org/security/cve-assignement/-/issues/40
• WEBhttps://gitlab.eclipse.org/security/vulnerability-reports/-/issues/226