CVE-2017-1000028

Description

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

References

https://github.com/baifdz/Patches

https://github.com/cyberwithcyril/VulhubPenTestingReport

https://github.com/liminghjh/CVE-vulnerability-reproduction

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904

https://www.exploit-db.com/exploits/45198/

https://www.exploit-db.com/exploits/45196/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1356

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS