Back to search
CVE-2012-2969
Published: Aug 12, 2012
Modified: Sep 17, 2024
PUBLISHED
Description
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
VU#309979
third-party-advisory
x_refsource_CERT-VN
http://en.securitylab.ru/lab/
x_refsource_MISC
http://en.securitylab.ru/lab/PT-2012-05
x_refsource_MISC
http://caucho.com/resin-4.0/changes/changes.xtp
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now