Path Traversal Vulnerability in Eclipse GlassFish by Eclipse Foundation

CVE-2022-2712

What is CVE-2022-2712?

A path traversal vulnerability exists in Eclipse GlassFish versions 5.1.0 through 6.2.5 that allows remote unauthenticated attackers to exploit the system by manipulating relative paths. The vulnerability arises from the server's failure to adequately filter request paths starting with './', which can enable attackers to access sensitive files. This access may include critical configuration data and source code of deployed applications, thus raising significant security risks for users and applications relying on the affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References