VULNERABILITY INTELLIGENCE
CVE-2008-2462
CVSS score4.3 MEDIUM
EPSS probability2.85%
CISA KEVNot currently listed
Published2008-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Primary references
- cret@cert.org — Third Party Advisory
- cret@cert.org
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry