Skip to content
OpenAdvisories

Package · Maven

org.apache.sling:org.apache.sling.auth.core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2013-4390

    Apache Sling Auth Core bundle vulnerable to Open Redirection

    Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…

    org.apache.sling:org.apache.sling.auth.core Maven