CVE-2024-9408

CVE-2024-9408 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting Eclipse GlassFish versions since 6.2.5. This flaw allows unauthenticated attackers to force the server to make requests to arbitrary locations, potentially leading to information disclosure, unauthorized actions, or denial of service. With a CVSS score of 9.8 (Critical), it presents a high risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.