| Package | Affected versions | Patched versions |
|---|---|---|
| org.glassfish.main.web:web | ≥ 5.1.0, < 7.0.0 | 7.0.0 |
| glassfish | ≥ 5.1.0, ≤ 6.2.5 |
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free