CVEvulnerability
CVE-2008-2462
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Affected configurations
• caucho resin (< 3.0.25)
• caucho resin (>= 3.1.0 < 3.1.4)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30845 Third Party Advisory
- http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007 www.caucho.com
- http://www.kb.cert.org/vuls/id/305208 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/29948 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020372 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1930/references Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43367 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30845 Third Party Advisory
- http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007 www.caucho.com
- http://www.kb.cert.org/vuls/id/305208 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/29948 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020372 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1930/references Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43367 Third Party Advisory, VDB Entry