Remote Code Inclusion Vulnerability in Payara Server
CVE-2024-8215
What is CVE-2024-8215?
A vulnerability has been identified in the Payara Server, specifically in the Admin Console modules, which results from improper neutralization of input during the generation of web pages. This flaw enables attackers to execute remote code inclusion, potentially compromising the integrity and security of web applications hosted on affected versions of the server. The vulnerability spans several versions, making it critical for organizations using Payara Server to apply the necessary updates and mitigations to protect their systems from exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Payara Server 5.20.0 < 5.68.0
Payara Server 6.0.0 < 6.19.0
Payara Server 6.2022.1 < 6.2024.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
