Product · Apache Software Foundation

Apache Sling

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2012-3353

Apache Sling JCR ContentLoader XmlReader Arbitrary File Load

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2…

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.jcr.contentloader Maven

Jan 8, 2018
High 8.8

CVE-2017-15700

Apache Sling Authentication Service vulnerability

A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.auth.core Maven

Dec 18, 2017