Description
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise before 5.45.0.
Remediation
References
Related Vulnerabilities
WordPress Plugin Crelly Slider Multiple Unspecified Vulnerabilities (1.1.1)
WordPress Plugin BigDoor Quick Gamification for WordPress Cross-Site Scripting (1.0.5)
WordPress Plugin Matrix Gallery 'upload.php' Arbitrary File Upload (2.1)
Moodle Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2025-67851)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9276)