payara__Payara_CVE-2022-37422_5-2022-2

Payara 平台社区版 创造。创新。提升。 Payara 平台社区版为开发项目和容器化的 Jakarta EE 与 MicroProfile 应用提供开源服务器运行时。 Payara Server Community 是一个面向开发项目的云原生、创新性开源中间件平台，支持 Jakarta EE（Java EE）应用在任何环境中运行：本地、云端或混合环境。 Payara Micro Community 是开发环境中容器化 Jakarta EE（Java EE）微服务部署的首选开源轻量级中间件平台。Payara Micro 体积小于 70MB，无需安装、配置或重写代码。 访问...

Code injection

Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...

CVE-2022-37422

CVE-2022-37422 describes an unauthenticated directory traversal in Payara products (Payara Server, Payara Micro, and Payara Server Embedded) that can be exploited without authentication. The vulnerability stems from directory traversal mechanisms in Payara up to version 5.2022.x (referenced as th...