Caucho Technology: >> Resin >> 1.2.2 Security Vulnerabilities
A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.
CVSS Score
5.1
EPSS Score
0.01
Published
2001-12-06
Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request.
CVSS Score
5.0
EPSS Score
0.031
Published
2001-05-03