{"action":"Upgrade com.caucho:resin to 4.0.29 or later.","affected":[{"fixed":"4.0.29","introduced":"0"}],"component":"com.caucho:resin","cve_ids":["CVE-2012-2965"],"ecosystem":"Maven","epss":0.01616,"exploited":false,"fixed_versions":["4.0.29"],"ghsa_id":"GHSA-p332-fw36-4hqx","id":"tcs_01M5N9699Z3SHQ67THYYQJP7J7","modified_at":"2025-04-12T03:27:06.624213Z","published_at":"2022-05-17T05:23:56Z","references":["https://osv.dev/vulnerability/GHSA-p332-fw36-4hqx","https://nvd.nist.gov/vuln/detail/CVE-2012-2965","https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05","http://caucho.com/resin-4.0/changes/changes.xtp","http://en.securitylab.ru/lab","http://www.kb.cert.org/vuls/id/309979"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p332-fw36-4hqx","url":"https://osv.dev/vulnerability/GHSA-p332-fw36-4hqx"}],"summary":"Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables"}