There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
References
Link | Resource |
---|---|
https://github.com/maybe-why-not/reponame/issues/2 | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-04-04 06:15
Updated : 2022-04-11 11:40
NVD link : CVE-2021-44138
Mitre link : CVE-2021-44138
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
caucho
- resin