CVE-2024-9408

EPSS 0.30%

Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints

Published: 7/16/2025Modified: 7/18/2025

Description

In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 4.0—CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

References (4)