{"action":"Upgrade org.glassfish.main.admin:rest-service to 7.0.17 or later.","affected":[{"fixed":"7.0.17","introduced":"0"}],"component":"org.glassfish.main.admin:rest-service","cve_ids":["CVE-2024-9329"],"ecosystem":"Maven","epss":0.00719,"exploited":false,"fixed_versions":["7.0.17"],"ghsa_id":"GHSA-jq3f-mfmg-747x","id":"tcs_01M5N93EEHGEN89AWARW30YH2V","modified_at":"2024-10-07T19:00:49.801844Z","published_at":"2024-09-30T09:30:47Z","references":["https://osv.dev/vulnerability/GHSA-jq3f-mfmg-747x","https://nvd.nist.gov/vuln/detail/CVE-2024-9329","https://github.com/eclipse-ee4j/glassfish/pull/25106","https://github.com/eclipse-ee4j/glassfish/commit/6ca35eee2ba90a8108984b27bec33f9cc50cd83b","https://github.com/eclipse-ee4j/glassfish","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/232"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jq3f-mfmg-747x","url":"https://osv.dev/vulnerability/GHSA-jq3f-mfmg-747x"}],"summary":"Eclipse Glassfish improperly handles http parameters"}