CVE-2012-2968

Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
cauchoresin
𝑥
≤ 4.0.28
cauchoresin
2.0.0
cauchoresin
2.0.1
cauchoresin
2.0.2
cauchoresin
2.0.3
cauchoresin
2.0.4
cauchoresin
2.0.5
cauchoresin
2.1.0
cauchoresin
2.1.1
cauchoresin
2.1.2
cauchoresin
2.1.3
cauchoresin
2.1.4
cauchoresin
2.1.5
cauchoresin
2.1.6
cauchoresin
2.1.7
cauchoresin
2.1.8
cauchoresin
2.1.9
cauchoresin
2.1.10
cauchoresin
2.1.11
cauchoresin
2.1.12
cauchoresin
2.1.13
cauchoresin
2.1.14
cauchoresin
2.1.15
cauchoresin
2.1.16
cauchoresin
2.1.snap:snap
cauchoresin
3.0.0
cauchoresin
3.0.1:beta
cauchoresin
3.0.2:beta
cauchoresin
3.0.3
cauchoresin
3.0.4
cauchoresin
3.0.5
cauchoresin
3.0.6
cauchoresin
3.0.7
cauchoresin
3.0.8
cauchoresin
3.0.9
cauchoresin
3.0.10
cauchoresin
3.0.11
cauchoresin
3.0.12
cauchoresin
3.0.13
cauchoresin
3.0.14
cauchoresin
3.0.15
cauchoresin
3.0.16
cauchoresin
3.0.17
cauchoresin
3.0.18
cauchoresin
3.0.19
cauchoresin
3.0.20
cauchoresin
3.1.0
cauchoresin
3.1.1
cauchoresin
3.1.2
cauchoresin
3.1.3
cauchoresin
3.1.4
cauchoresin
3.1.5
cauchoresin
3.1.6
cauchoresin
3.1.7
cauchoresin
3.1.8
cauchoresin
3.1.9
cauchoresin
3.1.10
cauchoresin
3.1.11
cauchoresin
3.1.12
cauchoresin
3.1.13
cauchoresin
4.0.0
cauchoresin
4.0.1
cauchoresin
4.0.2
cauchoresin
4.0.3
cauchoresin
4.0.4
cauchoresin
4.0.5
cauchoresin
4.0.6
cauchoresin
4.0.7
cauchoresin
4.0.8
cauchoresin
4.0.9
cauchoresin
4.0.10
cauchoresin
4.0.11
cauchoresin
4.0.12
cauchoresin
4.0.13
cauchoresin
4.0.14
cauchoresin
4.0.15
cauchoresin
4.0.16
cauchoresin
4.0.17
cauchoresin
4.0.18
cauchoresin
4.0.19
cauchoresin
4.0.20
cauchoresin
4.0.21
cauchoresin
4.0.22
cauchoresin
4.0.23
cauchoresin
4.0.24
cauchoresin
4.0.25
cauchoresin
4.0.26
cauchoresin
4.0.27
𝑥
= Vulnerable software versions