CVE-2017-15700

The provided connected documents identify CVE-2017-15700 as a flaw in Apache Sling Authentication Service (version 1.4.0) related to the AuthUtil#isRedirectValid method. The root cause is flawed redirect validation, which can be exploited via the Sling login form to trick a victim into sending cr...