Skip to content

Product

apache sling auth core component vulnerabilities

1 published CVE affecting apache sling auth core component, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest apache sling auth core component CVEs

Newest publication first

  1. CVE-2013-4390 Apache Sling Auth Core bundle vulnerable to Open Redirection

    Published
    MediumCVSS 5.8 EPSS 3.1%

    Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.