Cross-Site Scripting Vulnerabilities in Apache Sling API and Servlets
CVE-2015-2944

Currently unrated

Key Information:

Vendor

Apache
Status
Sling Servlets Post
Sling Api
Vendor
CVE Published:
2 June 2015

What is CVE-2015-2944?

Multiple cross-site scripting (XSS) vulnerabilities in the Apache Sling API and Apache Sling Servlets Post allow remote attackers to inject arbitrary web scripts or HTML through specially crafted URIs. These vulnerabilities can lead to unauthorized access and exploitation of web applications utilizing these components.

References

http://jvn.jp/en/jp/JVN61328139/index.html
third-party-advisoryx_refsource_JVN
http://www.securityfocus.com/bid/74839
vdb-entryx_refsource_BID
https://issues.apache.org/jira/browse/SLING-2082
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.