Sling Authentication Service (Apache) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2017-12-18. Vendor: Apache.

CVEs of Sling Authentication Service

• CVE-2017-15700 - CVSS 8.8 (high), 2017-12-18: A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling…