PT-2026-97259 · Apache · Apache Sling Security Bundle
CVSS v3.1
7.3
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Apache Sling Security Bundle versions prior to 1.3.2
Description
The
ReferrerFilter accepts evidence that is weaker than the origin, which may allow for security bypasses.Recommendations
Upgrade to version 1.3.2.
Fix
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Sling Security Bundle