CVE-2012-2968: Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote a...

Security readout for executives and security teams

CVE-2012-2968 is a directory traversal flaw in Caucho Quercus distributed with Resin before 4.0.29. A remote attacker could cause file creation outside the intended directory by abusing pathname handling in an HTTP request. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where Resin before 4.0.29 is deployed with Quercus enabled and reachable over HTTP. The provided affected-product metadata is incomplete, so teams should validate against actual Resin and Quercus deployment records. Treat internet-facing legacy Resin deployments as a priority for inventory and upgrade. The flaw can affect file integrity, but source evidence is incomplete and does not show active exploitation. Business urgency depends on whether older Resin with Quercus is still exposed. Mitigation focus: Identify Resin installations older than 4.0.29 and whether Quercus is enabled.; Review Caucho Resin 4.0 change notes and vendor guidance for the relevant fix.; Upgrade affected Resin deployments to 4.0.29 or a supported later release where applicable..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.