sling vulnerabilities

1 known vulnerability in sling from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Apache Sling Engine: Improper Neutralization of Input During Web Page Generation

  CVE-2022-45064Apr 13, 2023ApacheEPSS 1.12%

  The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resou