Product

org.apache.sling/org.apache.sling.servlets.resolver vulnerabilities

1 published CVE affecting org.apache.sling/org.apache.sling.servlets.resolver, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.sling/org.apache.sling.servlets.resolver CVEs

Newest publication first

CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal
Published 2024-02-06

HighCVSS 7.5 EPSS 1.3%

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.sling/org.apache.sling.servlets.resolver vulnerabilities

Latest org.apache.sling/org.apache.sling.servlets.resolver CVEs

CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal