Lucene search
+L

13 matches found

Kitploit
Kitploit
•added 2026/10/12 11:32 p.m.•15 views

apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0

Apache Sling Servlet Resolver This module is part of the Apache Sling project. Bundle implementing the Sling API ServletResolver. See the servlets and scripts documentation for how this works...

8.5CVSS7.6AI score0.01321EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/02/26 12:00 a.m.•51 views

Apache Sling Path Traversal Vulnerability

Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. Designed to meet the JSR-170 content repository such as Apache Jackrabbit to create content-centric applications. A path traversal vulnerability exists in Apache Sling Servlets Resolver...

8.5CVSS6.8AI score0.01321EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/02/19 12:00 a.m.•18 views

Apache Sling Servlets Resolver Path Traversal

The vulnerability of the software for processing servlets in web applications on the Java Apache Sling Servlets Resolver platform is related to incorrect pathname restrictions for restricted directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotel...

8.5CVSS7.7AI score0.01321EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/02/06 12:30 p.m.•75 views

GHSA-H2RQ-QHR7-53GM Apache Sling Servlets Resolver executes malicious code via path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

7.5CVSS8.1AI score0.01321EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/02/06 12:30 p.m.•44 views

Apache Sling Servlets Resolver executes malicious code via path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

8.5CVSS8.1AI score0.01321EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/02/06 10:15 a.m.•69 views

CVE-2024-23673

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

8.5CVSS8.7AI score0.01321EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/06 10:15 a.m.•28 views

Path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

4.6CVSS7.6AI score0.01321EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2024/02/06 10:04 a.m.•7 views

CVE-2024-23673

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

9CVSS0.01321EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/02/06 10:04 a.m.•41 views

CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

8.5CVSS7.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/02/06 10:04 a.m.•52 views

CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

8.5CVSS8.9AI score0.01321EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•5 views

PT-2024-1697

Name of the Vulnerable Software and Affected Versions Apache Sling Servlets Resolver versions prior to 2.11.0 Description The issue is related to incorrect restriction of the directory path name in the Apache Sling Servlets Resolver, which can be exploited by a remote attacker to execute arbitrar...

8.5CVSS6.7AI score0.01321EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/06 12:00 a.m.•8 views

CVE-2024-23673: Improper Limitation of a Pathname to a Restricted Directory

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

8.5CVSS5.9AI score0.01321EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/06 12:00 a.m.•27 views

Apache Sling 路径遍历漏洞

Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. Designed to meet the JSR-170 content repository such as Apache Jackrabbit to create content-centric applications. A path traversal vulnerability exists in Apache Sling Servlets Resolver...

8.5CVSS6.9AI score0.01321EPSS
SaveExploits0References3
Rows per page
Query Builder