Description

Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.

Remediation

References

CVE-2012-2968

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2007-0222)

Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)

WordPress Improper Input Validation Vulnerability (CVE-2013-5738)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-25604)

WordPress Plugin Two Factor Authentication Cross-Site Scripting (1.0.7)

Severity

Medium

Classification

CVE-2012-2968 CWE-22

Tags

Missing Update Known Vulnerabilities