Vendor/product archive

apache / sling_xss_protection_api CVEs

Beta · best-effort

1 CVEs tagged to apache / sling_xss_protection_api — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2017-15717

Published Jan 10, 2018

A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special craf…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1