CVE-2001-0828

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-12-06 · updated 2026-06-16

Description

A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.

Affected products

Caucho Technology Resin: through 1.2.4; 1.2.2

References

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.caucho.com/products/resin/changes.xtp
http://www.kb.cert.org/vuls/id/981651
http://www.osvdb.org/1890
http://www.securityfocus.com/bid/2981
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.caucho.com/products/resin/changes.xtp
http://www.kb.cert.org/vuls/id/981651
http://www.osvdb.org/1890
http://www.securityfocus.com/bid/2981
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793

Get alerted when CVE-2001-0828 or the next vulnerability affects your stack