GHSA-p332-fw36-4hqx

ghsaUSosv

Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

Advisory ansehen veröffentlicht 2022-05-17Lizenz: CC-BY-4.0

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2012-2965US	high7.5	1.62% (76th)	—	2012-08-12
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

http://caucho.com/resin-4.0/changes/changes.xtpWEB
http://en.securitylab.ru/labWEB
http://www.kb.cert.org/vuls/id/309979WEB
https://nvd.nist.gov/vuln/detail/CVE-2012-2965ADVISORY
https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan