In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints.
References:GSA_kwCzR0hTQS1mN2g1LWM2MjUtMzc5Nc4ABKN2
Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:org.glassfish.main.admingui:console-common | <= 6.2.5 | No known fixed version | |
Affected Version RangesAll affected versions5.1.0, 6.0.0, 6.1.0, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5 |
|||