GitHub Advisoryadvisory · Maven

GHSA-p332-fw36-4hqx Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

HIGH Published 2022-05-17 Modified 2025-04-12 Official page ↗
Aliases
CVE-2012-2965
Ecosystem
Maven
Packages
com.caucho:resin
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Weaknesses
CWE-20
Reviewed
2025-04-12

Affected packages

• Maven com.caucho:resin: < 4.0.29 → fixed in 4.0.29

Description

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

Related

Alias · CVE (1)

  • CVE-2012-2965 Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References