Skip to content
OpenAdvisories

Package · Maven

org.apache.sling:org.apache.sling.servlets.post

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2012-2138 Public exploit EPSS 14%

    Apache Sling POST Servlets Denial of Service Vulnerability

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite…

    org.apache.sling:org.apache.sling.servlets.post Maven