CVE-2012-2966
1 advisory.
Maven/com.caucho:resin CVE-2012-2966: high
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Action: Upgrade com.caucho:resin to 4.0.29 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.29 | - |
Fixed versions
| 4.0.29 |
Sources
- osv: GHSA-g5fx-ccwv-5c4f
- https://nvd.nist.gov/vuln/detail/CVE-2012-2966
- https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05
- http://caucho.com/resin-4.0/changes/changes.xtp
- http://en.securitylab.ru/lab
- http://www.kb.cert.org/vuls/id/309979
CVE-2012-2966 · published · modified · JSON