32 matches found
CVE-2021-41381
CVE-2021-41381 I have come-up with a POC for Payara Micro Community 5.2021.6 - Directory Traversal, Please refer above reference field...
EUVD-2022-6560
Malicious code in bioql PyPI...
EUVD-2024-41751
Malicious code in bioql PyPI...
Security Bulletin: HTTP Request/Response Splitting via Improper CRLF Neutralization in Payara Server and Micro (Grizzly, REST Modules), affects watsonx.data
Summary Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affec...
CVE-2021-41381
Payara Micro Community 5.2021.6 and below allows Directory Traversal...
CVE-2024-45687
Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affects Payar...
Payara Server和Payara Micro 注入漏洞
Payara Server and Payara Micro are both products of Payara, Inc. of the U.K. Payara Server is a cloud-native, innovative, open-source middleware platform. payara Micro is an open-source, lightweight middleware platform for containerized Jakarta EE Java EE application deployment. An injection...
CVE-2024-45687: Improper Neutralization of CRLF Sequences in HTTP Headers
Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affects Payar...
PT-2025-2727
Name of the Vulnerable Software and Affected Versions: Payara Server versions 4.1.151 through 4.1.2.191.51 Payara Server versions 5.20.0 through 5.70.0 Payara Server versions 5.2020.2 through 5.2022.5 Payara Server versions 6.2022.1 through 6.2024.12 Payara Server versions 6.0.0 through 6.21.0...
CVE-2023-41699 Payara Platform: URL Redirection to untrusted site using FORM authentication
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server, Micro and Embedded Servlet Implementation modules allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.4...
CVE-2023-41699: URL Redirection to Untrusted Site
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server, Micro and Embedded Servlet Implementation modules allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.4...
PT-2023-28054 · Payara · Payara Micro/Embedded +1
Name of the Vulnerable Software and Affected Versions: Payara Server versions 5.0.0 through 5.56.0 Payara Server versions 4.1.2.191 through 4.1.2.191.45 Payara Server versions 6.0.0 through 6.7.0 Payara Server versions 6.2023.1 through 6.2023.10 Payara Micro and Embedded versions 5.0.0 through...
Path Traversal
payara-micro is vulnerable to path traversal. The vulnerability exists because the setClasspath function of GFLauncher.java does not properly set the ext directory, allowing an attacker to access files outside the expected directory...
CVE-2022-37422
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...
CVE-2022-37422
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...
CVE-2022-37422
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...
CVE-2022-37422
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...
CVE-2022-37422: Improper Limitation of a Pathname to a Restricted Directory
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...
PT-2022-23987 · Payara · Payara Micro +2
Name of the Vulnerable Software and Affected Versions: Payara versions through 5.2022.2 Description: The issue allows directory traversal without authentication, affecting Payara Server, Payara Micro, and Payara Server Embedded. Recommendations: For Payara versions through 5.2022.2, update to a...
Payara 路径遍历漏洞
Payara Services Ltd Payara Micro Community and others are products of Payara Services Ltd, UK.Payara Micro Community is a Java Web server.Payara Server and others are products of Payara, UK. Payara Server is a cloud-native, innovative, open source middleware platform.Payara Micro is an open sourc...