Executive brief
Path Traversal in Caucho Resin
Affected products
- Maven com.caucho:resin
Junglewise Threat Intelligence
CVE-2021-44138: Path Traversal in Caucho Resin
CVE-2021-44138 · Severity: low · CVSS 3.1 · Published 2022-04-05
Technologies: com.caucho:resin (Maven). Vendors: Maven.
Related threats
- Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
- Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
- Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons