← back
CVE-2017-1000028

CVE-2017-1000028

EPSS 99.5%
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.
Affected products
n/a · n/a
public PoCs found — 6
githubgithub.com/NeonNOXX/CVE-2017-1000028★ 1cve_referencewww.exploit-db.com/exploits/45196/unverifiedcve_referencewww.exploit-db.com/exploits/45198/unverifiedexploitdbwww.exploit-db.com/exploits/45198unverifiedexploitdbwww.exploit-db.com/exploits/39441unverifiedexploitdbwww.exploit-db.com/exploits/45196unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/45196/https://www.exploit-db.com/exploits/45198/https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904