Server Side Request Forgery Vulnerability in Eclipse GlassFish Software
CVE-2024-9408

8.9HIGH

Key Information:

Vendor

Eclipse Foundation

Status
Eclipse Glassfish
Vendor
CVE Published:
16 July 2025

What is CVE-2024-9408?

A Server Side Request Forgery vulnerability has been identified in Eclipse GlassFish versions starting from 6.2.5. This flaw allows attackers to exploit specific endpoints, potentially leading to unauthorized actions and information leakage from the server. Proper validation and controls are essential to mitigate these security risks and protect the integrity of the environment.

Affected Version(s)

Eclipse Glassfish 6.2.5

References

https://gitlab.eclipse.org/security/cve-assignement/-/iss...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mustafa GĂśNDOÄžDU
.
CVE-2024-9408 : Server Side Request Forgery Vulnerability in Eclipse GlassFish Software