Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-37422 - Vulnerability Database
Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-37422
High
Reference:
CVE-2022-37422
Title:
Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server Payara Micro and Payara Server Embedded.