CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - emo@eclipse.org

Published

2025-07-16

Last modified

2025-07-16

Weaknesses

CWE-918

Affected products

• Glassfish (Eclipse)
• Eclipse Glassfish (Eclipse Foundation)

References

• https://gitlab.eclipse.org/security/cve-assignement/-/issues/38