Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS CON device name and a registered file extension such as .jsp or .xtp.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Resin | Caucho_technology | 2.1.1 (including) | 2.1.1 (including) |