Threats tagged 'ghsa-325x-xm3p-mmv6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.6	EPSS 0.4%	CVE-2026-12605Eclipse GlassFish · Server-Side Request Forgery Critical9.6EPSS 0.4%2026-08-06CVE Database V5CVE-2026-12605 CVE-2026-12605 is a critical vulnerability in Eclipse GlassFish versions 8.0.0 before 8.0.4. It involves a combination of CSRF and SSRF vulnerabilities in the DownloadServlet ContentSources that can leak the admin gfresttoken to an attacker-controlled host if the victim is authenticated in the Admin Console. This leakage allows an unauthenticated attacker to fully take over the Eclipse GlassFish domain until the token expires. EPSS 0.4%Vulnerability Eclipse Foundation CWE-918 #ghsa-325x-xm3p-mmv6	CVE Database V5	2026-08-06

Page 1 of 1