Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.sling:org.apache.sling.cms

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Maven Central

Advisories 3

  • CVE-2023-22849Medium 6.1

    Apache Sling App CMS: XSS in CMS Reference / UI Components

    Affected: fixed in 1.1.6.

  • CVE-2022-46769Medium 5.4

    Apache Sling App CMS: XSS in CMS Site Group Detail

    Affected: fixed in 1.1.4.

  • CVE-2022-43670Medium 5.4

    XSS in Sling CMS Reference App Taxonomy Path

    Affected: fixed in 1.1.2.