CVE-2023-28462
1 advisory.
Maven/fish.payara.server:payara-aggregator CVE-2023-28462: critical 9.8, EPSS 0.94%
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
Action: Upgrade fish.payara.server:payara-aggregator to 6.2022.1.Alpha3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2020.1 | 6.2022.1.Alpha3 | - |
Fixed versions
| 6.2022.1.Alpha3 |
Sources
- osv: GHSA-xc93-587g-mxm7
- https://nvd.nist.gov/vuln/detail/CVE-2023-28462
- https://blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191
- https://github.com/payara/Payara
CVE-2023-28462 · published · modified · JSON