CVE-2017-1000028

No fix known EPSS 99%

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Published 2017-07-13 · CVE record · OSV

Products: oracle glassfish_server