Vulnerability in Caucho Resin

CVE-2012-2969

Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.

EPSS: 0.035 (88.1th percentile) — read the EPSS interpretation.

Affected products

  • Caucho Resin — versions 2.0.0, 2.0.1, 2.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References