Path Traversal in Caucho Resin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-44138 · ADVISORY
• maybe-why-not/reponame · WEB

com.caucho:resin のその他の脆弱性

• CVE-2012-2967高 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons…
• CVE-2012-2966高 7.5Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, w…
• CVE-2012-2965高 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has …