CVE-2022-45064

CVE-2022-45064 describes an XSS vulnerability in the SlingRequestDispatcher within Apache Sling, caused by an incorrect implementation of the RequestDispatcher API that allows include-based XSS when an attacker can include a resource with a controllable content-type and include path. The impact i...