Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-37422 - Vulnerability Database

Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-37422

High
Reference: CVE-2022-37422
Title: Payara Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server Payara Micro and Payara Server Embedded.