Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

GHSA-vqrm-83g6-pfv4 · CVE-2024-10029

Published Jul 16, 2025 · Modified Jul 18, 2025

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-10029
PACKAGE https://github.com/eclipse-ee4j/glassfish
WEB https://gitlab.eclipse.org/security/cve-assignement/-/issues/40
WEB https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/226

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

Description

References

More Maven vulnerabilities

Start Securing