CVE-2024-10031

Medium CVSS: 5.8

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting
attacks by modifying the configuration file in the underlying operating system.

Vendor

Eclipse

Product

Glassfish

CWE

CWE-79

Yayın Tarihi

2025-07-16 11:15:23

Güncelleme

2025-07-16 19:56:10

Source Identifier

emo@eclipse.org

KEV Date Added

Kategoriler

CWE-79 Glassfish MEDIUM Eclipse 2025

Referanslar

https://gitlab.eclipse.org/security/cve-assignement/-/issues/41

Benzer Kayıtlar

Critical

CVE-2026-24457

An unsafe parsing of OpenMQ's configuration, allows a remote attacker to read arbitrary files from a MQ Broker's server.…

High

CVE-2026-1605

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…

Low

CVE-2025-11143

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Different…

Critical

CVE-2026-1699

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_tar…

Medium

CVE-2026-1188

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all suppor…

High

CVE-2026-0648

The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_…