apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0

Resolvedor de Servlets de Apache Sling Este módulo es parte del proyecto Apache Sling. Bundle que implementa el ServletResolver de la API de Sling. Consulte la documentación de servlets y scripts para ver cómo funciona...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle El Apache Sling XSS Bundle proporciona dos servicios para escapar y filtrar el contenido enviado por el usuario propenso a XSS: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Consulte el JavaDoc de cada servicio para descubrir qué métodos ofrecen...

VUL4J-23

Apache Sling ¡Recuperando la diversión! Apache Sling es un framework web que utiliza un repositorio de contenido Java, como Apache Jackrabbit, para almacenar y gestionar contenido. Las aplicaciones de Sling utilizan scripts o servlets Java, seleccionados según convenciones simples de nombres, par...

CVE-2026-94251

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

CVE-2026-94243

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

CVE-2026-92001

Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

CVE-2026-91928

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

CVE-2026-91999

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

CVE-2026-73192

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability when using the XSSAPI.getValidHref in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack in every feature using this metho...

CVE-2026-91852

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

CVE-2026-94243

The Apache Sling Security Bundle is vulnerable to a security flaw where the ReferrerFilter accepts weaker-than-origin evidence. This issue affects all versions before 1.3.2 . To remediate this vulnerability, users are recommended to upgrade to version 1.3.2 . No specific exploit details or in-the...

CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

EUVD-2026-85182

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

CVE-2026-94251 Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

CVE-2026-94251

The Apache Sling Security Bundle is vulnerable in versions prior to 1.3.12 due to a flaw where the ContentDispositionFilter mediates only one address/API shape of a resource. This issue allows for potential security bypasses or inconsistent filtering. Users are recommended to upgrade to version 1...

CVE-2026-94251 Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

EUVD-2026-85180

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

CVE-2026-91928

The Apache Sling XSS component is vulnerable to a cross-site scripting (XSS) issue caused by the improper neutralization of input during web page generation. This vulnerability affects versions prior to 2.4.12 . The CVSS 3.1 score is 6.1 (MEDIUM) , indicating that while exploitation requires user...

EUVD-2026-85179

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...