GitHub Advisoryadvisory · Maven

GHSA-g5fx-ccwv-5c4f Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

HIGH Published 2022-05-17 Modified 2025-04-12 Official page ↗
Aliases
CVE-2012-2966
Ecosystem
Maven
Packages
com.caucho:resin
Severity
High
Reviewed
2025-04-12

Affected packages

• Maven com.caucho:resin: < 4.0.29 → fixed in 4.0.29

Description

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

Related

Alias · CVE (1)

  • CVE-2012-2966 Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters,… vulnerability

References