Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: certcc

Published: 2022-10-03T16:15:36

Updated: 2022-10-03T16:15:36

Reserved: 2022-10-03T00:00:00


Link: CVE-2012-2969

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2012-08-12T16:55:01.293

Modified: 2012-09-04T04:00:00.000


Link: CVE-2012-2969

JSON object: View

cve-icon Redhat Information

No data.

CWE