Payara · Payara Server · CVE-2022-37422
**Name of the Vulnerable Software and Affected Versions**
Payara versions through 5.2022.2
**Description**
The issue allows directory traversal without authentication, affecting Payara Server, Payara Micro, and Payara Server Embedded.
**Recommendations**
For Payara versions through 5.2022.2, update to a version that contains a fix for this issue to prevent directory traversal without authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.