Description

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.

Remediation

References

CVE-2017-1000029

Related Vulnerabilities

WordPress Plugin Elementor Pro Cross-Site Scripting (2.0.9)

SharePoint CVE-2021-1726 Vulnerability (CVE-2021-1726)

MySQL CVE-2016-0598 Vulnerability (CVE-2016-0598)

WordPress Plugin All-in-One Event Calendar Multiple Cross-Site Scripting Vulnerabilities (1.5)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Security Bypass (2.3.2.1)

Severity

High

Classification

CVE-2017-1000029 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities