Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-52699
HistoryMay 30, 2023 - 12:00 a.m.

Apache Sling Input Validation Error Vulnerability

2023-05-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
21
apache sling
input validation
vulnerability
apache foundation
java platform
content repository
apache jackrabbit
json
input validation error
attacker
unexpected error
specially crafted input
security

EPSS

0.005

Percentile

75.9%

Apache Sling is the United States Apache (Apache) Foundation of a Java platform for open source Web framework. Designed to comply with JSR-170 content repository (such as Apache Jackrabbit) to create content-centric applications. An input validation error vulnerability exists in Apache Sling Commons JSON that stems from incorrect input validation, which can be exploited by an attacker to trigger an unexpected error by providing specially crafted input.

EPSS

0.005

Percentile

75.9%