Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS

CVE-2023-26513

What is CVE-2023-26513?

An excessive iteration vulnerability has been identified in the Apache Sling Resource Merger component, affecting versions prior to 1.4.2. This flaw could potentially be exploited by attackers to compromise the application’s integrity and lead to various security risks. It is crucial for users of the affected versions to implement the recommended updates to safeguard their applications and data.

References