Vulnerabilidades do Apache Software Foundation Apache Sling Security Bundle
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apache Software Foundation Apache Sling Security Bundle: 2 registro(s), com versões afetadas e correções.
CVE-2026-94251
Média · 6.5
CWE-693 23/09/2026
Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
This issue affects Apache Sling Security Bundle: before 1.3.12.
Users are recommended to upgrade to version 1.3.12, which fixes the issue.
CVE-2026-94243
Alta · 7.3
CWE-346 23/09/2026
Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence.
This issue affects Apache Sling Security Bundle: before 1.3.2.
Users are recommended to upgrade to version 1.3.2, which fixes the issue.