Description
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Social Feed Gallery Unspecified Vulnerability (2.1.1)
WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-8663)
WordPress Plugin Events Manager Multiple Cross-Site Scripting Vulnerabilities (5.3.3)
Liferay Portal Missing Authorization Vulnerability (CVE-2023-33948)