What is GHSA-p332-fw36-4hqx?

GHSA-p332-fw36-4hqx is a security advisory published by GitHub Security Advisories with High severity. Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

Which CVE IDs does GHSA-p332-fw36-4hqx cover?

GHSA-p332-fw36-4hqx covers the following CVE IDs: CVE-2012-2965. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-p332-fw36-4hqx?

GHSA-p332-fw36-4hqx affects 1 product, including: maven/com.caucho:resin:\u003c 4.0.29.

GHSA-p332-fw36-4hqxHigh

Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2012-2965 →

📋 Description

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

🎯 Affected products1

maven/com.caucho:resin:< 4.0.29

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-2965
http://caucho.com/resin-4.0/changes/changes.xtp
http://www.kb.cert.org/vuls/id/309979
http://en.securitylab.ru/lab
https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05
https://github.com/advisories/GHSA-p332-fw36-4hqx