← Database

CVE-2024-8646

MEDIUM CVSS: 6.1 Published: 2024-09-11 Modified: 2026-06-17

Description

In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish. This vulnerability only affects applications that are explicitly deployed to the root context ('/').

Affected Platforms

Eclipse Glassfish

Weakness Type

CWE-601, CWE-601

References