Medium WID-SEC-2023-0471 1 CVE

Apache Sling: Schwachstelle ermöglicht Darstellen falscher Informationen

Published Feb 22, 2023 · Updated Feb 22, 2023 · de-DE

Vendor: Apache Product: Sling < 2.6.2 Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Apache Sling ausnutzen, um falsche Informationen darzustellen.

Product

Apache Sling ist ein Open Source-Webframework für die Java-Plattform.

Vulnerabilities 1

Medium 6.5

CVE-2023-25621

Apache Sling does not allow to handle i18n content in a secure way

Privilege Escalation vulnerability in Apache Software Foundation Apache Sling. Any content author is able to create i18n dictionaries in the repository in a location the author has write access to. As these translations are used across the whole product, it a…

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.i18n Maven

Feb 23, 2023

Revision history

2023-02-22 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-mrpv-5pmr-p92h vom 2023-02-23
https://github.com/advisories/GHSA-mrpv-5pmr-p92h