Back to Database
Status published
Medium
CVE-2022-2712
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a...
Vulnerability Description
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2712
Credits & Attribution
No credits recorded in the NVD database.
References
More from The Eclipse Foundation
View All →CVE-2023-0100
In Eclipse BIRT, starting from version 2.6.2, the default configuration...
Unknown
0
CVE-2022-3676
In Eclipse Openj9 before version 0.35.0, interface calls can be...
Unknown
0
CVE-2022-2838
In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser...
Medium
5.3
CVE-2022-2576
In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a...
High
7.5
CVE-2022-2191
In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru...
High
7.5
Affected Vendor
The Eclipse Foundation
View all reports →Affected Software
Eclipse GlassFish
Vulnerable Versions:
5.1.0, unspecified
Timeline
Official Publish:
January 27th, 2023
Last Modified:
March 27th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N