CVE-2008-2462: XSS
First published: Mon Jun 30 2008(Updated: )
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Credit: cret@cert.org cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Caucho Resin | <3.0.25 | |
| Caucho Resin | >=3.1.0<3.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205,%202007
- http://www.kb.cert.org/vuls/id/305208
- http://www.securityfocus.com/bid/29948
- http://secunia.com/advisories/30845
- http://www.securitytracker.com/id?1020372
- http://www.vupen.com/english/advisories/2008/1930/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43367
- http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/caucho
- canonical/caucho resin
- version/caucho resin/3.1.0