CVE-2022-2712

CVE-2022-2712 is a relative path traversal vulnerability affecting Eclipse GlassFish versions 5.1.0 through 6.2.5. This flaw allows a remote, unauthenticated attacker to bypass security filters by using "./" in request paths, potentially leading to unauthorized access to sensitive data like configuration files and application source code. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.