CVE-2023-5763

Description

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

Reserved 2023-10-25 | Published 2023-11-03 | Updated 2024-09-05 | Assigner eclipse

Problem types

CWE-913 Improper Control of Dynamically-Managed Code Resources

CWE-20 Improper Input Validation

Product status

Default status
unaffected

6.0.0
affected

5.0
affected

Credits

tr1ple kurosel (AntGroup FG) finder

References

glassfish.org/docs/latest/security-guide.html

gitlab.eclipse.org/security/cve-assignement/-/issues/14

cve.org (CVE-2023-5763)

nvd.nist.gov (CVE-2023-5763)

Download JSON