| CVE-2023-25621 |
Privilege Escalation vulnerability in Apache Software Foundation Apache Sling
|
Not rated
|
Feb 23, 2023 |
| CVE-2022-32549 |
Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection
|
Not rated
|
Jun 22, 2022 |
| CVE-2017-15717 |
A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and…
|
Not rated
|
Jan 10, 2018 |
| CVE-2012-3353 |
The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to…
|
Not rated
|
Jan 8, 2018 |
| CVE-2017-15700 |
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0…
|
Not rated
|
Dec 18, 2017 |
| CVE-2016-6798 |
In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser…
|
Not rated
|
Jul 19, 2017 |
| CVE-2016-5394 |
In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString()…
|
Not rated
|
Jul 19, 2017 |