Vulnerabilities > CVE-2001-0828 - Cross-Site Scripting vulnerability in Caucho Technology Resin 1.2.2

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
caucho-technology

Summary

A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.

Vulnerable Configurations

Part Description Count
Application
Caucho_Technology
2