CVE-2022-32549

A flaw was found in Apache Sling Commons Log. This flaw allows an attacker to benefit from the flaw and forge logs, allowing cover tracks and potentially corrupting log files...

biz.netcentric.cq.tools.accesscontroltool:minimum-environment (>=3.0.0, <=4.2.4), biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4) +64 more potentially affected by CVE-2022-32549 via org.apache.sling:org.apache.sling.commons.log (>=5.0.0, <=5.4.0)

org.apache.sling:org.apache.sling.commons.log MAVEN version =5.0.0, =3.0.0, =4.2.0, =1.0.3, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0 and more Source cves: CVE-2022-32549 Source advisory: GHSA-QMX3-M648-HR74...

com.activecq.tools.quickimage:core (1.0.0) potentially affected by CVE-2022-32549 via org.apache.sling:org.apache.sling.commons.log (3.0.0)

org.apache.sling:org.apache.sling.commons.log MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sling:org.apache.sling.commons.log and may be impacted: - com.activecq.tools.quickimage:core 1.0.0 Source cves: CVE-2022-32549...

biz.netcentric.aem.tools.accesscontrolvalidator:accesscontrolvalidator-bundle (>=1.0.0, <=1.0.1), biz.netcentric.cq.tools.accesscontroltool:accesscontroltool-bundle (>=1.2.8, <=4.2.4) +625 more potentially affected by CVE-2022-32549 via org.apache.sling:org.apache.sling.api (>=2.0.2-incubator, <=2.25.0)

org.apache.sling:org.apache.sling.api MAVEN version =2.0.2-incubator, =1.0.0, =1.2.8, =2.5.4, =2.5.4, =4.2.0, =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.0.1, =0.0.8 - com.adobe.aem.commons:assetshare.ui.apps 1.9.6 - com.adobe.aem.commons:assetshare.ui.content 1.9.6 and more Source cves: CVE-2022-32549...

biz.netcentric.aem.tools.accesscontrolvalidator:accesscontrolvalidator-bundle (>=1.0.0, <=1.0.1), biz.netcentric.cq.tools.accesscontroltool:accesscontroltool-bundle (>=1.2.8, <=4.2.4) +625 more potentially affected by CVE-2022-32549 via org.apache.sling:org.apache.sling.api (>=2.0.2-incubator, <=2.25.0)

org.apache.sling:org.apache.sling.api MAVEN version =2.0.2-incubator, =1.0.0, =1.2.8, =2.5.4, =2.5.4, =4.2.0, =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.0.1, =0.0.8 - com.adobe.aem.commons:assetshare.ui.apps 1.9.6 - com.adobe.aem.commons:assetshare.ui.content 1.9.6 and more Source cves: CVE-2022-32549...

CVE-2022-32549 log injection in Sling logging

Apache Sling Commons Log = 5.4.0 and Apache Sling API = 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files...

CVE-2022-32549

The CVE-2022-32549 entries describe a log-injection flaw in Apache Sling Commons Log ≤ 5.4.0 and Apache Sling API ≤ 2.25.0 due to improper input validation. An attacker could forge logs to obscure activity and potentially corrupt log files. Multiple connected sources (NVD, Red Hat, CNVD, OSV, Ver...

CVE-2022-32549 log injection in Sling logging

Apache Sling Commons Log = 5.4.0 and Apache Sling API = 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files...