Homepage
About Snyk

org.apache.sling:org.apache.sling.jcr.contentloader@2.1.0 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.apache.sling:org.apache.sling.jcr.contentloader package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary File Import

org.apache.sling:org.apache.sling.jcr.contentloader is a framework for RESTful web-applications based on an extensible content tree.

Affected versions of this package are vulnerable to Arbitrary File Import. The attacker may import arbitrary files in the content repository, including local files, causing potential information leaks.

How to fix Arbitrary File Import?

Upgrade org.apache.sling:org.apache.sling.jcr.contentloader to version 2.1.6 or higher.

[,2.1.6)
Go back to all versions of this package