Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications

GHSA-hp97-5x6g-q538 · CVE-2024-10031

Published Jul 16, 2025 · Modified Jul 18, 2025

Description

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-10031
PACKAGE https://github.com/eclipse-ee4j/glassfish
WEB https://gitlab.eclipse.org/security/cve-assignement/-/issues/41
WEB https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/229

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes