Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.sling:org.apache.sling.api

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • log injection in Sling logging

    Affected: through 2.25.0.

  • Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow…

    Affected: fixed in 2.2.2.

  • The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0…

    Affected: fixed in 2.4.0.