The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Resin | Caucho_technology | 3.0.17 (including) | 3.0.17 (including) |
| Resin | Caucho_technology | 3.0.18 (including) | 3.0.18 (including) |