Package · Maven

org.apache.sling:org.apache.sling.engine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.0

CVE-2022-45064

Apache Sling Engine: Include-based XSS

The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a reso…

Apache Software Foundation Apache Sling Engine org.apache.sling:org.apache.sling.engine Maven

Apr 13, 2023