CVE-2012-2965

Published Aug 12, 2012 CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Description
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-2943 Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
Github GHSA Github GHSA GHSA-p332-fw36-4hqx Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Sep 16, 2024, 8:52 PM
Reserved
May 30, 2012, 12:00 AM
Status
Modified
Published
Aug 12, 2012, 4:55 PM
Modified
Jun 16, 2026, 11:42 PM