Vulnerability in Caucho Resin

CVE-2012-2966

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

  • Caucho Resin — versions 2.0.0, 2.0.1, 2.0.2
  • N/a — versions n/a

References