Cross site request forgery (csrf)

The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service infinite loop via a crafted HTTP request...

CVE-2012-2138

The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service infinite loop via a crafted HTTP request...

CVE-2012-2138

The vulnerability CVE-2012-2138 affects the Apache Sling project, specifically the org.apache.sling.servlets.post bundle before version 2.1.2. The @CopyFrom operation in the Sling POST servlet fails to prevent copying an ancestor node to a descendant, enabling remote attackers to trigger a denial...

CVE-2012-2138

The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service infinite loop via a crafted HTTP request...

PT-2012-3830

Name of the Vulnerable Software and Affected Versions Apache Sling versions prior to 2.1.2 Description The issue allows remote attackers to cause a denial of service infinite loop via a crafted HTTP request. This is due to the @CopyFrom operation in the POST servlet not preventing attempts to cop...

CVE-2012-2138: Undefined Security Weakness

The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service infinite loop via a crafted HTTP request...

Apache Sling 2.1.0 Denial Of Service

CVE-2012-2138 : Apache Sling denial of service vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: org.apache.sling.servlets.post bundle up to 2.1.0 Description: The @CopyFrom operation of the Sling POST servlet allows for copying a parent node to one of it...

Apache Sling - Denial of Service

Apache Sling - Denial of Service source: https://www.securityfocus.com/bid/54341/info Apache Sling is prone to a denial-of-service vulnerability. An attacker can exploit this issue to exhaust available memory, resulting in a denial-of-service condition. Apache Sling 2.1.0 and prior are vulnerable...

Apache Sling - Denial of Service

source: https://www.securityfocus.com/bid/54341/info Apache Sling is prone to a denial-of-service vulnerability. An attacker can exploit this issue to exhaust available memory, resulting in a denial-of-service condition. Apache Sling 2.1.0 and prior are vulnerable. curl -u admin:pwd -d ""...