CVE-2017-1000028

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Glassfish Server (Oracle)

References

• https://www.exploit-db.com/exploits/45196/
• https://www.exploit-db.com/exploits/45198/
• https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904