Description

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.

Remediation

References

https://blog.payara.fish/august-community-5-release

https://www.payara.fish/downloads/

Related Vulnerabilities

CVE-2020-26272 Vulnerability in npm package electron

CVE-2024-1597 Vulnerability in maven package org.postgresql:postgresql

CVE-2019-1003032 Vulnerability in maven package org.jenkins-ci.plugins:email-ext

CVE-2021-24033 Vulnerability in npm package react-dev-utils

CVE-2020-15250 Vulnerability in maven package junit:junit

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Release Notes Vendor Advisory Product