GHSA-3g5w-6pw7-6hrpMediumCVSS 6.5

Path Traversal In Eclipse GlassFish

Published
January 27, 2023
Last Modified
January 28, 2023

🔗 CVE IDs covered (1)

CVE-2022-2712 →

📋 Description

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.

🎯 Affected products1

  • maven/org.glassfish.main.web:web:>= 5.1.0, < 7.0.0

🔗 References (4)