GitHub Advisoryadvisory · Maven

GHSA-2qr7-8fp8-4xxr Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons

HIGH Published 2022-05-17 Modified 2025-04-12 Official page ↗
Aliases
CVE-2012-2967
Ecosystem
Maven
Packages
com.caucho:resin
Severity
High
Reviewed
2025-04-12

Affected packages

• Maven com.caucho:resin: < 4.0.29 → fixed in 4.0.29

Description

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the `==` (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.

Related

Alias · CVE (1)

  • CVE-2012-2967 Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for… vulnerability

References