org.apache.sling:org.apache.sling.auth.core@1.4.0 vulnerabilities
-
latest version
1.7.0
-
latest non vulnerable version
-
first published
14 years ago
-
latest version published
7 months ago
-
licenses detected
- [1.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.sling:org.apache.sling.auth.core package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials. |
[1.4.0,1.4.2)
|