Apache Sling Jcr Base Vulnerabilities