Moderate severityNVD Advisory· Published Nov 3, 2023· Updated Sep 5, 2024
Glassfish remote code execution
CVE-2023-5763
Description
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.glassfish.main.orb:orb-connectorMaven | >= 5.0.0, < 7.0.0 | 7.0.0 |
Affected products
2- Eclipse Foundation/Glassfishv5Range: 6.0.0
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.