CVE-2013-4390

The CVE-2013-4390 vulnerability affects the Apache Sling Auth Core bundle (org.apache.sling.auth.core) in the AbstractAuthenticationFormServlet, with versions prior to 1.1.4. An open redirect exists that lets remote attackers redirect users to arbitrary sites via a resource parameter, enabling ph...