| CVE-2023-25621 |
Privilege Escalation vulnerability in Apache Software Foundation Apache Sling
|
Non notée
|
23 févr. 2023 |
| CVE-2022-32549 |
Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection
|
Non notée
|
22 juin 2022 |
| CVE-2017-15717 |
A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and…
|
Non notée
|
10 janv. 2018 |
| CVE-2012-3353 |
The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to…
|
Non notée
|
8 janv. 2018 |
| CVE-2017-15700 |
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0…
|
Non notée
|
18 déc. 2017 |
| CVE-2016-6798 |
In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser…
|
Non notée
|
19 juil. 2017 |
| CVE-2016-5394 |
In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString()…
|
Non notée
|
19 juil. 2017 |