high7.5
CVE-2022-37422
Path Traversal in Payara
Impact
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | fish.payara.api:payara-bom | < 5.2022.3 | 5.2022.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Payara | Payara | before 4.1.2.191.36 before 5.2022.3 from 5.0.0 before 5.42.0 |