CVE-2022-45129
- Source
- https://cve.org/CVERecord?id=CVE-2022-45129
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-45129.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-45129
- Aliases
- Published
- 2022-11-10T06:15:13.813Z
- Modified
- 2026-03-13T22:51:35.756973Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise before 5.45.0.
- References
-
- https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%205.45.0.html
- http://seclists.org/fulldisclosure/2022/Nov/11
- https://blog.payara.fish/whats-new-in-the-november-2022-payara-platform-release
- https://docs.payara.fish/community/docs/6.2022.1/Release%20Notes/Release%20Notes%206.2022.1.html
- https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%205.2022.4.html
- https://github.com/payara/Payara/commit/cccdfddeda71c78ae7b3179db5429e1bb8a56b2e
- http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html
Affected packages
Git / github.com/payara/payara
Affected ranges
- Type
- GIT
- Repo
- https://github.com/payara/payara
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/payara/payara
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
4.*
4.0-upstream-GA
4.1.1.163
GF4.*
GF4.1
payara-server-4.*
payara-server-4.1.1.154
payara-server-4.1.1.161
payara-server-4.1.1.164
payara-server-4.1.1.171
payara-server-4.1.144
payara-server-4.1.151
payara-server-4.1.152
payara-server-4.1.153
payara-server-4.1.2.172
payara-server-4.1.2.173
payara-server-4.1.2.174
payara-server-4.1.2.181
payara-server-5.*
payara-server-5.0.0.Alpha1
payara-server-5.0.0.Alpha2
payara-server-5.181
payara-server-5.191.10.RC1
payara-server-5.2020.7
payara-server-5.2020.7.RC1
payara-server-5.2020.7.RC2
payara-server-5.2021.1.RC1
payara-server-5.2021.10
payara-server-5.2021.10.RC1
payara-server-5.2021.3
payara-server-5.2021.3.RC1
payara-server-5.2021.5
payara-server-5.2021.5.RC1
payara-server-5.2021.5.RC2
payara-server-5.2021.5.RC3
payara-server-5.2021.6
payara-server-5.2021.6.RC1
payara-server-5.2021.6.RC2
payara-server-5.2021.7
payara-server-5.2021.7.RC1
payara-server-5.2021.7.RC2
payara-server-5.2021.8.RC1
payara-server-5.2021.9
payara-server-5.2021.9.RC1
payara-server-5.2022.1
payara-server-5.2022.1.RC1
payara-server-5.2022.2
payara-server-5.2022.2.RC1
payara-server-5.2022.2.RC2
payara-server-5.2022.3
payara-server-5.2022.3.RC1
payara-server-5.Beta1
payara-server-5.Beta2
Database specific
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.2.191.38"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.45.0"
}
]
},
{
"events": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.2022.4"
}
]
},
{
"events": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.2022.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2022-11-04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.2.191.38"
}
]
},
{
"events": [
{
"introduced": "5.x"
},
{
"fixed": "5.2022.4"
}
]
},
{
"events": [
{
"introduced": "6.x"
},
{
"fixed": "6.2022.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.45.0"
}
]
}
]
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-45129.json"