CVE-2023-5763
Glassfish remote code execution
Summary
Glassfish remote code execution
Original description
The description as published by the source.
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.eclipse.org
- web glassfish.org