Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2012-2138

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-342c-f869-5m44

Apache Sling POST Servlets Denial of Service Vulnerability The `@CopyFrom` operation in the POST servlet in the `org.apache.sling.servlets.post` bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.

gitlab/maven/org.apache.sling/org.apache.sling.servlets.post/CVE-2012-2138

Apache Sling POST Servlets Denial of Service Vulnerability The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.