Resin 2.0.5 up to and including 2.1.2 allows remote malicious users to reveal physical path information via a URL request for the example Java class file HelloServlet.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
caucho technology resin 2.1.2 |
||
caucho technology resin 2.0 |
||
caucho technology resin 2.1.1 |