Vulnerability Details CVE-2021-41381
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.801
EPSS Ranking 99.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.html
- http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html
- http://seclists.org/fulldisclosure/2022/Nov/11
- https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POC
- https://www.exploit-db.com/exploits/50371
- https://www.payara.fish
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt
- http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.html
- http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html
- http://seclists.org/fulldisclosure/2022/Nov/11
- https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POC
- https://www.exploit-db.com/exploits/50371
- https://www.payara.fish
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt
Products affected by CVE-2021-41381
-
cpe:2.3:a:payara:micro_community:*