Eclipse GlassFish 路径遍历漏洞

Eclipse GlassFish is an open source application server from the Eclipse Foundation. A security vulnerability exists in Eclipse GlassFish versions 5.1.0 through 6.2.5, which stems from not filtering paths that begin with a specific string...

PT-2023-12896 · Eclipse · Eclipse Glassfish

Name of the Vulnerable Software and Affected Versions: Eclipse GlassFish versions 5.1.0 through 6.2.5 Description: The issue is related to relative path traversal, where the software does not filter request paths starting with './'. This could allow a remote unauthenticated attacker to access...

CVE-2022-2712

Vulnerability: CVE-2022-2712 affects Eclipse GlassFish 5.1.0–6.2.5. Root cause is a relative path traversal flaw that fails to filter request paths starting with './'. Impact stated: remote unauthenticated attacker could access critical data (e.g., configuration files and deployed application sou...

CVE-2022-2712

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed...

Eclipse GlassFish Detection (HTTP)

HTTP based detection of Eclipse GlassFish. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100190...