Maven package
com.caucho/resin
pkg:maven/com.caucho/resin
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-44138 | — | >= 4.0.52, <= 4.0.56 | — | Apr 4, 2022 | There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. | ||
| CVE-2012-2967 | — | < 4.0.29 | 4.0.29 | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors. | ||
| CVE-2012-2966 | — | < 4.0.29 | 4.0.29 | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors. | ||
| CVE-2012-2965 | — | < 4.0.29 | 4.0.29 | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue. |
- CVE-2021-44138Apr 4, 2022affected >= 4.0.52, <= 4.0.56
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
- CVE-2012-2967Aug 12, 2012affected < 4.0.29fixed 4.0.29
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
- CVE-2012-2966Aug 12, 2012affected < 4.0.29fixed 4.0.29
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
- CVE-2012-2965Aug 12, 2012affected < 4.0.29fixed 4.0.29
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.