CVE-2026-12605
CriticalCVSS 9.6Summary
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authenticated into the Admin Console, leading to full unauthenticated takeover of the GlassFish domain until the token expires.
Risk Assessment
An attacker can gain full control over the GlassFish domain, potentially leading to data integrity and confidentiality breaches and service disruption.
Recommendation
Upgrade Eclipse GlassFish to version 8.0.4 or later, which contains the fix.
Original NVD description (English source)
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authenticated into the Admin Console -\> full unauthenticated takeover of Eclipse GlassFish domain until the token expires.