CVE-2004-0281: Caucho Resin

Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days.

Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.

Affected products

• Caucho Resin: version 2.1.12 only

Published 2004-11-23. Last modified 2026-06-16.