Privilege Escalation

Apache Sling I18N Support is vulnerable to Privilege Escalation. The vulnerability is due to translations being spread across the whole product, an attacker with content author permission can create an i18n dictionary which replaces button texts, resulting in the attacker tricking a user to click...

Code injection

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...