Vulnerability in Eclipse Glassfish Could Lead to Redirect to Untrusted Sites

CVE-2024-8646

What is CVE-2024-8646?

In the affected versions of Eclipse Glassfish (prior to 7.0.10), a URL redirection vulnerability exists that allows attackers to redirect users to untrusted sites. This vulnerability is linked to an earlier issue in the Apache code utilized within GlassFish, specifically impacting applications that are deployed to the root context ('/'). It's crucial for developers and organizations utilizing Glassfish to address this security issue to protect against potential phishing attempts and unauthorized data access.

References