Description

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Remediation

References

CVE-2017-1000028

Related Vulnerabilities

XWiki Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-26479)

Internet Information Services Other Vulnerability (CVE-2002-1744)

IBMHttpServer Other Vulnerability (CVE-2000-0505)

WordPress Plugin Rezgo Cross-Site Scripting (1.4.2)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-14234)

Severity

High

Classification

CVE-2017-1000028 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities