Unrated severityNVD Advisory· Published Jun 30, 2008· Updated Apr 23, 2026

CVE-2008-2462

Description

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Affected products

Caucho Technology/Resin
cpe:2.3:a:caucho:resin:*:*:*:*:*:*:*:*
Range: <3.0.25

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/30845nvdThird Party Advisory
www.kb.cert.org/vuls/id/305208nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/29948nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/1930/referencesnvdThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43367nvdThird Party AdvisoryVDB Entry
www.caucho.com/resin/changes/changes-31.xtpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000