Lucene search
+L

6 matches found

NVD
NVD
added 2026/09/18 8:16 p.m.4 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/18 7:00 p.m.6 views

EUVD-2017-19014

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 7:00 p.m.9 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the resin-doc documentation webapp, specifically through the jndi-appconfig tutorial servlet. By supplying directory traversal sequences in the inputFile request parameter, remote unauthenticated attackers can read arbitrary files outside th...

8.7CVSS0.00958EPSS
SaveIn wildExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2026/09/18 12:00 a.m.10 views

VulnCheck KEV: CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveIn wildExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
added 2026/09/18 12:00 a.m.2 views

CVE-2017-20284: Improper Limitation of a Pathname to a Restricted Directory

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References2
seebug.org
seebug.org
added 2016/03/23 12:00 a.m.256 views

resin-doc 会议管理系统任意文件读取漏洞

http://../resin-doc/resource/tutorial/jndi-appconfig/test?inputFile= inputFile参数可任意文件读取 google搜一下还可以搜到很多 比如:...

7.1AI score
SaveExploits0
Rows per page
Query Builder