Skip to content

Product

org.apache.sling/org.apache.sling.jcr.contentloader vulnerabilities

1 published CVE affecting org.apache.sling/org.apache.sling.jcr.contentloader, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.sling/org.apache.sling.jcr.contentloader CVEs

Newest publication first

  1. CVE-2012-3353 Apache Sling JCR ContentLoader XmlReader Arbitrary File Load

    Published
    HighCVSS 7.5 EPSS 3.1%

    The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR Conte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.