Not rated
CVE-2022-32549 Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection
Description
Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Sling 5.4 | earliest → 5.4.0 | No fix stated |
| Apache Sling 2.25 | earliest → 2.25.0 | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Sling
The 7 CVEs of Apache Sling →
CVE-2023-25621
Privilege Escalation vulnerability in Apache Software Foundation Apache Sling
Not rated
CVE-2017-15717
A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and…
Not rated
CVE-2012-3353
The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to…
Not rated
CVE-2017-15700
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0…
Not rated