PT-2001-1996 · Caucho Technology · Resin

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0828

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Caucho Technology Resin versions prior to 1.2.4

Description A cross-site scripting issue allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, causing an error message that does not properly quote the Javascript.

Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2001-0828

Affected Products

Resin

References · 8

• 🔥 http://securityfocus.com/bid/2981 · Exploit
• http://caucho.com/products/resin/changes.xtp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0828 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0828 · Note
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html · Note
• http://osvdb.org/1890 · Note
• http://kb.cert.org/vuls/id/981651 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6793 · Note