Advisories · Technology
Apache Software Foundation Apache Sling XSS.
Every CVE that names Apache Software Foundation Apache Sling XSS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Apache Sling XSS: xssAPI.getStyleToken() accepts markup in unquoted urls.
- Apache Software Foundation Apache Sling XSS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms
- Apache Software Foundation Apache Sling XSS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl
- Apache Software Foundation Apache Sling XSS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Apache Sling XSS: Improper escaping in the XSS Webconsole plugin
- Apache Software Foundation Apache Sling XSS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Apache Sling XSS: Missing parser resource limits
- Apache Software Foundation Apache Sling XSS
- Denial of service
- CVSS 6.1 Medium
Apache Sling XSS: XSS possible through XSSAPI.getValidHref()
- Apache Software Foundation Apache Sling XSS
- Cross-site scripting (XSS)