Description

Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.

Remediation

References

CVE-2012-2968

Related Vulnerabilities

Atlassian Jira Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26137)

ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7368)

WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)

concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24986)

Moodle Other Vulnerability (CVE-2006-4943)

Severity

Medium

Classification

CVE-2012-2968 CWE-22

Tags

Missing Update Known Vulnerabilities