| Package | Affected versions | Patched versions |
|---|---|---|
| com.caucho:resin | < 4.0.29 | 4.0.29 |
| resin | = 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.10= 2.1.11= 2.1.12= 2.1.13= 2.1.14= 2.1.15= 2.1.16= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.1.9= 2.1.snap= 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.20= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.1.0= 3.1.1= 3.1.10= 3.1.11= 3.1.12= 3.1.13= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.1.6= 3.1.7= 3.1.8= 3.1.9= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.17= 4.0.18= 4.0.19= 4.0.2= 4.0.20= 4.0.21= 4.0.22= 4.0.23= 4.0.24= 4.0.25= 4.0.26= 4.0.27= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9≤ 4.0.28 |
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free