Not rated
CVE-2026-94243 A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence
Description
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Sling Security Bundle 1.3 | earliest → < 1.3.2 | 1.3.2 |