Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Caucho Resin 用户请求 目录遍历漏洞
Vulnerability Description
Resin是一款由Caucho Technology开发的WEB服务器，可使用在Microsoft Windows操作系统下。 Resin捆绑了自己的单机版Web服务器，默认下运行在8080端口上，其对用户请求的处理上存在漏洞，远程攻击者可以利用此漏洞遍历服务器的目录。 任意用户都可以请求类似于以下的URL： http://victim:8080/C:%5C/ 访问C盘根目录及其之下的任意文件。攻击者还可以指定任意盘符。
CVSS Information
N/A
Vulnerability Type
N/A