CVE-2006-2438: Caucho Technology Resin

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid.

Affected products

• Caucho Technology Resin: version 3.0.17 only; version 3.0.18 only

Published 2006-05-17. Last modified 2026-06-16.