Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-4390

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j7f2-cqvq-5jcf

Apache Sling Auth Core bundle vulnerable to Open Redirection Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."

gitlab/maven/org.apache.sling/org.apache.sling.auth.core/CVE-2013-4390

Improper Input Validation Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."