high7.5
CVE-2021-44138
Path Traversal in Caucho Resin
Impact
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.caucho:resin | >= 4.0.52, <= 4.0.56 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caucho | Resin | from 4.0.52 through 4.0.56 |