GHSA-2mw4-wj8c-7f93
Suggest an improvement- Source
- https://github.com/advisories/GHSA-2mw4-wj8c-7f93
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-2mw4-wj8c-7f93/GHSA-2mw4-wj8c-7f93.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-2mw4-wj8c-7f93
- Aliases
- Published
- 2023-11-03T09:32:49Z
- Modified
- 2024-02-16T08:11:53.682476Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- Eclipse Glassfish remote code execution issue
- Details
-
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
- Database specific
{ "cwe_ids": [ "CWE-20", "CWE-913" ], "github_reviewed": true, "github_reviewed_at": "2023-11-03T19:46:48Z", "severity": "MODERATE", "nvd_published_at": "2023-11-03T07:15:14Z" }- References
Affected packages
Maven / org.glassfish.main.orb:orb-connector
Package
- Name
- org.glassfish.main.orb:orb-connector
- View open source insights on deps.dev
- Purl
- pkg:maven/org.glassfish.main.orb/orb-connector