CVE-2013-2254

CVE-2013-2254 affects Apache Sling’s org.apache.sling.servlets.post.bundle in deepGetOrCreateNode (AbstractCreateOperation.java). The root cause is improper handling of a NULL value when the session lacks permissions to the root node, enabling remote denial of service via an infinite loop in Slin...