CVE-2024-10031

Eclipse Foundation / Eclipse Glassfish PUBLISHED

Description (CNA)

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse Glassfish	affected 7.0.15

CWE

CWE-79

References

https://gitlab.eclipse.org/security/cve-assignement/-/issues/41

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.