PT-2025-29771 · Eclipse · Eclipse Glassfish

Mustafa Gündoğdu · Published 2025-07-16 · Updated 2025-07-16 · CVE-2024-9408

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eclipse GlassFish versions 6.2.5 and later

Description Eclipse GlassFish is susceptible to a Server Side Request Forgery (SSRF) attack affecting specific endpoints. SSRF occurs when an attacker can induce the server to make requests to unintended locations.

Recommendations Eclipse GlassFish versions 6.2.5 and later: Address the issue by restricting access to the affected endpoints.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-9408

GHSA-F7H5-C625-3795

Affected Products

Eclipse Glassfish

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-9408 · Security Note
• https://osv.dev/vulnerability/CVE-2024-9408 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f7h5-c625-3795 · Vendor Advisory
• https://github.com/eclipse-ee4j/glassfish · Note
• https://gitlab.eclipse.org/security/cve-assignement/-/issues/38 · Note
• https://t.me/cvenotify/129146 · Telegram Post
• https://twitter.com/CVEnew/status/1945562986472513641 · Twitter Post
• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/239 · Note