Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-94251 EUVD-2026-85180GHSA-xmr7-hc5m-fgwm

Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Sling Security Bundle

Description

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

This issue affects Apache Sling Security Bundle: before 1.3.12.

Users are recommended to upgrade to version 1.3.12, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Sling Security Bundle < 1.3.12 1.3.12

Advisories 1

References