Junglewise Threat Intelligence

CVE-2012-2965: Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

CVE-2012-2965 · Severity: medium · CVSS 4 · Published 2022-05-17

Technologies: com.caucho:resin (Maven). Vendors: Maven.

Executive brief

Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

Affected products

Maven com.caucho:resin

Related threats

Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Path Traversal in Caucho Resin