Sling Servlets Resolver vulnerabilities

1 known vulnerability in Sling Servlets Resolver from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Sling Servlets Resolver: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-23673Feb 6, 2024ApacheEPSS 1.32%

  Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact