CVE-2008-2462

MEDIUM 4.3CVE-2008-2462 · Published 30/06/2008 · updated 16/06/2026

In short

CVE-2008-2462 is a MEDIUM (CVSS 4.3) vulnerability affecting resin (caucho).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.7% of all vulnerabilities.
Fix: update to 3.1.4, 3.0.25 or later.

Package	Affected versions	Patched versions
resin caucho	`≥ 3.1.0, < 3.1.4< 3.0.25`	`3.1.43.0.25`

Description

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

References

secunia.com/advisories/30845 · Third Party Advisory
caucho.com/resin/changes/changes-31.xtp
kb.cert.org/vuls/id/305208 · Third Party Advisory
securityfocus.com/bid/29948 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2008/1930/references · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43367 · Third Party Advisory

More vulnerabilities in resin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

resin

caucho

≥ 3.1.0, < 3.1.4< 3.0.25

3.1.43.0.25

More vulnerabilities in resin

See all →