Description
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Remediation
References
https://gitlab.eclipse.org/security/cve-assignement/-/issues/14
https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server
Related Vulnerabilities
CVE-2021-22051 Vulnerability in maven package org.springframework.cloud:spring-cloud-gateway-server
CVE-2022-4361 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2023-46998 Vulnerability in npm package bootbox
CVE-2021-26296 Vulnerability in maven package org.apache.myfaces.core:myfaces-core-project
CVE-2023-28935 Vulnerability in maven package org.apache.uima:uima-ducc-parent