Package · Maven

org.apache.sling:org.apache.sling.auth.core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2017-15700

Apache Sling Authentication Service vulnerability

A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.auth.core Maven

Dec 18, 2017