{"action":"Upgrade com.caucho:resin to 4.0.29 or later.","affected":[{"fixed":"4.0.29","introduced":"0"}],"component":"com.caucho:resin","cve_ids":["CVE-2012-2966"],"ecosystem":"Maven","epss":0.01616,"exploited":false,"fixed_versions":["4.0.29"],"ghsa_id":"GHSA-g5fx-ccwv-5c4f","id":"tcs_01M5N8XDXCMAKCDNV68YJNNZ84","modified_at":"2025-04-12T03:57:07.230389Z","published_at":"2022-05-17T05:23:56Z","references":["https://osv.dev/vulnerability/GHSA-g5fx-ccwv-5c4f","https://nvd.nist.gov/vuln/detail/CVE-2012-2966","https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05","http://caucho.com/resin-4.0/changes/changes.xtp","http://en.securitylab.ru/lab","http://www.kb.cert.org/vuls/id/309979"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g5fx-ccwv-5c4f","url":"https://osv.dev/vulnerability/GHSA-g5fx-ccwv-5c4f"}],"summary":"Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters"}