Remote Code Inclusion Vulnerability in Payara Server

CVE-2024-8215

What is CVE-2024-8215?

A vulnerability has been identified in the Payara Server, specifically in the Admin Console modules, which results from improper neutralization of input during the generation of web pages. This flaw enables attackers to execute remote code inclusion, potentially compromising the integrity and security of web applications hosted on affected versions of the server. The vulnerability spans several versions, making it critical for organizations using Payara Server to apply the necessary updates and mitigations to protect their systems from exploitation.

References