The Eclipse Foundation Eclipse Glassfish vulnerabilities

1 known vulnerability affecting the_eclipse_foundation/eclipse_glassfish.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-2712HIGHCVSS 7.5≥ 5.1.0, < unspecified≥ unspecified, ≤ 6.2.52023-01-27

CVE-2022-2712 [HIGH] CWE-22 CVE-2022-2712: In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal be In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.