Caucho Resin Path Traversal Vulnerability (CVE-2004-0281) - Active Check

Caucho Resin is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:caucho:resin";...

CVE-2004-0281

CVE-2004-0281 affects Caucho Resin (2.1.12) and is a path traversal vulnerability that allows remote disclosure of files under the /WEB-INF/ directory by requesting WEB-INF.., effectively bypassing directory boundaries. The core issue is improper normalization of path traversal sequences, enablin...

CVE-2004-0281

Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows...