Homepage
About Snyk

org.glassfish.main.web:web-core@6.2.2 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.glassfish.main.web:web-core package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Open Redirect

Affected versions of this package are vulnerable to Open Redirect due to improper validation of URL input parameters. An attacker can redirect users to malicious websites by crafting malicious URLs that exploit this vulnerability.

Notes:

  1. This is only exploitable if applications are explicitly deployed to the root context ('/').

  2. This vulnerability is caused by the vulnerability CVE-2023-41080 in the Apache code included in GlassFish.

How to fix Open Redirect?

Upgrade org.glassfish.main.web:web-core to version or higher.

[5.1.0,7.0.10]
  • M
Directory Traversal

Affected versions of this package are vulnerable to Directory Traversal due to missing validation of the request path.

How to fix Directory Traversal?

Upgrade org.glassfish.main.web:web-core to version 7.0.0 or higher.

[5.1.0,7.0.0)
Go back to all versions of this package