Skip to content
OpenAdvisories
High · 7.3 CVE-2026-94243 EUVD-2026-85182GHSA-h9q6-hwx8-gw7h

Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Sling Security Bundle

Description

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence.

This issue affects Apache Sling Security Bundle: before 1.3.2.

Users are recommended to upgrade to version 1.3.2, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Sling Security Bundle < 1.3.2 1.3.2

Advisories 1

References