CVE-2012-2968

EUVD-2012-2946
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
cauchoresin
𝑥
≤ 4.0.28
cauchoresin
2.0.0
cauchoresin
2.0.1
cauchoresin
2.0.2
cauchoresin
2.0.3
cauchoresin
2.0.4
cauchoresin
2.0.5
cauchoresin
2.1.0
cauchoresin
2.1.1
cauchoresin
2.1.2
cauchoresin
2.1.3
cauchoresin
2.1.4
cauchoresin
2.1.5
cauchoresin
2.1.6
cauchoresin
2.1.7
cauchoresin
2.1.8
cauchoresin
2.1.9
cauchoresin
2.1.10
cauchoresin
2.1.11
cauchoresin
2.1.12
cauchoresin
2.1.13
cauchoresin
2.1.14
cauchoresin
2.1.15
cauchoresin
2.1.16
cauchoresin
2.1.snap:snap
cauchoresin
3.0.0
cauchoresin
3.0.1:beta
cauchoresin
3.0.2:beta
cauchoresin
3.0.3
cauchoresin
3.0.4
cauchoresin
3.0.5
cauchoresin
3.0.6
cauchoresin
3.0.7
cauchoresin
3.0.8
cauchoresin
3.0.9
cauchoresin
3.0.10
cauchoresin
3.0.11
cauchoresin
3.0.12
cauchoresin
3.0.13
cauchoresin
3.0.14
cauchoresin
3.0.15
cauchoresin
3.0.16
cauchoresin
3.0.17
cauchoresin
3.0.18
cauchoresin
3.0.19
cauchoresin
3.0.20
cauchoresin
3.1.0
cauchoresin
3.1.1
cauchoresin
3.1.2
cauchoresin
3.1.3
cauchoresin
3.1.4
cauchoresin
3.1.5
cauchoresin
3.1.6
cauchoresin
3.1.7
cauchoresin
3.1.8
cauchoresin
3.1.9
cauchoresin
3.1.10
cauchoresin
3.1.11
cauchoresin
3.1.12
cauchoresin
3.1.13
cauchoresin
4.0.0
cauchoresin
4.0.1
cauchoresin
4.0.2
cauchoresin
4.0.3
cauchoresin
4.0.4
cauchoresin
4.0.5
cauchoresin
4.0.6
cauchoresin
4.0.7
cauchoresin
4.0.8
cauchoresin
4.0.9
cauchoresin
4.0.10
cauchoresin
4.0.11
cauchoresin
4.0.12
cauchoresin
4.0.13
cauchoresin
4.0.14
cauchoresin
4.0.15
cauchoresin
4.0.16
cauchoresin
4.0.17
cauchoresin
4.0.18
cauchoresin
4.0.19
cauchoresin
4.0.20
cauchoresin
4.0.21
cauchoresin
4.0.22
cauchoresin
4.0.23
cauchoresin
4.0.24
cauchoresin
4.0.25
cauchoresin
4.0.26
cauchoresin
4.0.27
𝑥
= Vulnerable software versions