CVE-2012-2969

Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
cauchoresin
𝑥
≤ 4.0.28
cauchoresin
2.0.0
cauchoresin
2.0.1
cauchoresin
2.0.2
cauchoresin
2.0.3
cauchoresin
2.0.4
cauchoresin
2.0.5
cauchoresin
2.1.0
cauchoresin
2.1.1
cauchoresin
2.1.2
cauchoresin
2.1.3
cauchoresin
2.1.4
cauchoresin
2.1.5
cauchoresin
2.1.6
cauchoresin
2.1.7
cauchoresin
2.1.8
cauchoresin
2.1.9
cauchoresin
2.1.10
cauchoresin
2.1.11
cauchoresin
2.1.12
cauchoresin
2.1.13
cauchoresin
2.1.14
cauchoresin
2.1.15
cauchoresin
2.1.16
cauchoresin
2.1.snap:snap
cauchoresin
3.0.0
cauchoresin
3.0.1:beta
cauchoresin
3.0.2:beta
cauchoresin
3.0.3
cauchoresin
3.0.4
cauchoresin
3.0.5
cauchoresin
3.0.6
cauchoresin
3.0.7
cauchoresin
3.0.8
cauchoresin
3.0.9
cauchoresin
3.0.10
cauchoresin
3.0.11
cauchoresin
3.0.12
cauchoresin
3.0.13
cauchoresin
3.0.14
cauchoresin
3.0.15
cauchoresin
3.0.16
cauchoresin
3.0.17
cauchoresin
3.0.18
cauchoresin
3.0.19
cauchoresin
3.0.20
cauchoresin
3.1.0
cauchoresin
3.1.1
cauchoresin
3.1.2
cauchoresin
3.1.3
cauchoresin
3.1.4
cauchoresin
3.1.5
cauchoresin
3.1.6
cauchoresin
3.1.7
cauchoresin
3.1.8
cauchoresin
3.1.9
cauchoresin
3.1.10
cauchoresin
3.1.11
cauchoresin
3.1.12
cauchoresin
3.1.13
cauchoresin
4.0.0
cauchoresin
4.0.1
cauchoresin
4.0.2
cauchoresin
4.0.3
cauchoresin
4.0.4
cauchoresin
4.0.5
cauchoresin
4.0.6
cauchoresin
4.0.7
cauchoresin
4.0.8
cauchoresin
4.0.9
cauchoresin
4.0.10
cauchoresin
4.0.11
cauchoresin
4.0.12
cauchoresin
4.0.13
cauchoresin
4.0.14
cauchoresin
4.0.15
cauchoresin
4.0.16
cauchoresin
4.0.17
cauchoresin
4.0.18
cauchoresin
4.0.19
cauchoresin
4.0.20
cauchoresin
4.0.21
cauchoresin
4.0.22
cauchoresin
4.0.23
cauchoresin
4.0.24
cauchoresin
4.0.25
cauchoresin
4.0.26
cauchoresin
4.0.27
𝑥
= Vulnerable software versions
Common Weakness Enumeration