CVE-2008-2462

CVE-2008-2462 concerns a cross-site scripting (XSS) vulnerability in Resin’s viewfile command. The issue allows remote attackers to inject arbitrary web script or HTML via the file parameter. Affected Resin versions are before 3.0.25 and 3.1.x before 3.1.4; remediation is to upgrade to Resin 3.0....