{"id":"CVE-2017-1000028","aliases":[],"url":"https://o3.security/vulnerability/CVE-2017-1000028","summary":"Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially…","details":"Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.","published":"2017-07-13T20:00:00.000Z","modified":"2024-08-05T21:53:06.131Z","cvss":null,"epss":{"score":0.99479,"percentile":0.99941,"asOf":"2026-08-27"},"cisaKev":null,"exploitsKnown":7,"affectedPackages":[],"fix":null,"references":[{"type":"EXPLOIT","url":"https://www.exploit-db.com/exploits/45198/"},{"type":"EXPLOIT","url":"https://www.exploit-db.com/exploits/45196/"},{"type":"WEB","url":"https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-05T21:53:06.131Z"}}