Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

ubuntu_osv/UBUNTU-CVE-2022-2712

Progress 0 / 0

Advisory Summary

ubuntu_osv/UBUNTU-CVE-2022-2712

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code. This is fixed in GlassFish 7.0.0.
Mitigation Type Mitigation Data Mitigation Note