Headline
CVE-2022-2712: Bug Access Denied
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './’. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.
Related documentation
- Creating an account
You are not authorized to access bug #580502. To see this bug, you must first log in to an account with the appropriate permissions.
Please press Back and try again.
Related news
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.