Vendor/product archive

apache / sling_authentication_service CVEs

Beta · best-effort

1 CVEs tagged to apache / sling_authentication_service — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2017-15700

Published Dec 18, 2017

A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1