CVE-2014-2966 | BDVDB-2026-62906 Detail

Description#

The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text restrictions via crafted characters, as demonstrated by bypassing an XSS protection mechanism.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/162308
http://caucho.com/products/resin/download#download

Exploit#

No public exploit known

History#

Version 12014-07-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.