Skip to content
OpenAdvisories

Package · Maven

org.apache.sling:org.apache.sling.auth.core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2017-15700

    Apache Sling Authentication Service vulnerability

    A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.

    Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.auth.core Maven
  • Medium 4.7
    CVE-2013-4390

    Apache Sling Auth Core bundle vulnerable to Open Redirection

    Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…

    org.apache.sling:org.apache.sling.auth.core Maven