Apache Software Foundation Sling Auth Core Component 1.1.2

CPE Details

Apache Software Foundation Sling Auth Core Component 1.1.2
apache
sling_auth_core_component
1.1.2
2013-10-24
12h25 +00:00
2013-10-25
12h52 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:apache:sling_auth_core_component:1.1.2:*:*:*:*:*:*:*

Informations

Vendor

apache

Product

sling_auth_core_component

Version

1.1.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-4390 2013-10-24 01h00 +00:00 Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."
5.8