GHSA-g5fx-ccwv-5c4f

ghsaUSosv

Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

view advisory published 2022-05-17Licence: CC-BY-4.0

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2012-2966US	high7.5	1.62% (76th)	—	2012-08-12
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote a…

references

External citations — patches, advisories, analysis.

http://caucho.com/resin-4.0/changes/changes.xtpWEB
http://en.securitylab.ru/labWEB
http://www.kb.cert.org/vuls/id/309979WEB
https://nvd.nist.gov/vuln/detail/CVE-2012-2966ADVISORY
https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan