CVE-2007-2440: Caucho Technology Resin

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.

Affected products

• Caucho Technology Resin: up to and including 3.1.0

Published 2007-05-16. Last modified 2026-06-16.