| Package | Affected versions | Patched versions |
|---|---|---|
| resin | = 1.1.5= 1.2 |
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free