acegisecurity:acegi-security-resin (0.9.0), ch.qos.logback:logback-access (>=${parent.version}, <=0.3) +3 more potentially affected by CVE-2012-2965 via com.caucho:resin (3.0.9)

com.caucho:resin MAVEN version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.caucho:resin and may be impacted: - acegisecurity:acegi-security-resin 0.9.0 - ch.qos.logback:logback-access =$parent.version, =2.3.0, =1.0.0-rc1, =2.0.0, =2.0.4...

CVE-2012-2965

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue...

CVE-2012-2965

CVE-2012-2965 affects Caucho Quercus on Resin prior to version 4.0.29. The vulnerability arises from improper handling of unspecified characters in variable names, related to an HTTP Parameter Contamination issue, with unknown impact and remote attack vectors. Remediation per multiple sources is ...

Caucho's Quercus on Resin contains multiple vulnerabilities

Overview Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description It has been reported that Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to...