Package · Maven

org.apache.sling:org.apache.sling.commons.log

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2022-32549

log injection in Sling logging

Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files.

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.api org.apache.sling:org.apache.sling.commons.log Maven

Jun 22, 2022