Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the RefererFilter process. An attacker can bypass security checks by providing weaker-than-origin evidence in HTTP requests. Remediation Upgrade org.apache.sling:org.apache.sling.security to version 1.3.2 or...

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure in the ContentDispositionFilter process. An attacker can bypass intended security restrictions by accessing alternative addresses or API shapes of a resource that are not properly mediated. Remediation Upgra...