CVE-2024-9408

EPSS 0.30%

Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints

發布日:2025/7/16修改日:2025/7/18

描述

In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 4.0—CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

參考連結(4)