Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://caucho.com/resin-4.0/changes/changes.xtp - | |
References | () http://en.securitylab.ru/lab/ - | |
References | () http://en.securitylab.ru/lab/PT-2012-05 - | |
References | () http://www.kb.cert.org/vuls/id/309979 - US Government Resource |
Information
Published : 2012-08-12 16:55
Updated : 2024-11-21 01:40
NVD link : CVE-2012-2965
Mitre link : CVE-2012-2965
CVE.ORG link : CVE-2012-2965
JSON object : View
Products Affected
caucho
- resin
CWE
CWE-20
Improper Input Validation