2 matches found
Apache Sling Authentication Service vulnerability
A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...
8.8CVSS6.9AI score0.01858EPSS
SaveExploits0References3Affected Software1
CVE-2017-15700
A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...
8.8CVSS8.6AI score0.01858EPSS
SaveExploits0References1
20