Package · Maven

org.apache.sling:org.apache.sling.jcr.base

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2023-25141

JNDI injection into Apache sling-org-apache-sling-jcr-base

Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or earlier) through utility functions in RepositoryAccessor. The functions getRepository and getRepositoryFromURL allow an application to acces…

Apache Software Foundation Apache Sling JCR Base org.apache.sling:org.apache.sling.jcr.base Maven

Feb 14, 2023