Hiroki Sawamura

**Name of the Vulnerable Software and Affected Versions** Eclipse Glassfish versions prior to 7.0.10 **Description** A URL redirection issue to untrusted sites exists, caused by a vulnerability in the included Apache code. This issue only affects applications explicitly deployed to the root context ('/'). The vulnerability can be exploited to redirect users to an arbitrary URL address. **Recommendations** For Eclipse Glassfish versions prior to 7.0.10, update to version 7.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to applications deployed to the root context ('/') until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Payara Server versions 5.0.0 through 5.56.0 Payara Server versions 4.1.2.191 through 4.1.2.191.45 Payara Server versions 6.0.0 through 6.7.0 Payara Server versions 6.2023.1 through 6.2023.10 Payara Micro and Embedded versions 5.0.0 through 5.56.0 Payara Micro and Embedded versions 4.1.2.191 through 4.1.2.191.45 Payara Micro and Embedded versions 6.0.0 through 6.7.0 Payara Micro and Embedded versions 6.2023.1 through 6.2023.10 **Description** The issue affects the Payara Platform, allowing URL redirection to untrusted sites. This can enable redirect access to libraries. **Recommendations** For Payara Server versions 5.0.0 through 5.56.0, update to version 5.57.0 or later. For Payara Server versions 4.1.2.191 through 4.1.2.191.45, update to version 4.1.2.191.46 or later. For Payara Server versions 6.0.0 through 6.7.0, update to version 6.8.0 or later. For Payara Server versions 6.2023.1 through 6.2023.10, update to version 6.2023.11 or later. For Payara Micro and Embedded versions 5.0.0 through 5.56.0, update to version 5.57.0 or later. For Payara Micro and Embedded versions 4.1.2.191 through 4.1.2.191.45, update to version 4.1.2.191.46 or later. For Payara Micro and Embedded versions 6.0.0 through 6.7.0, update to version 6.8.0 or later. For Payara Micro and Embedded versions 6.2023.1 through 6.2023.10, update to version 6.2023.11 or later.