Sling Servlets Post (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-08-14. Vendor: Apache.

CVEs of Sling Servlets Post

• CVE-2017-9802 - CVSS 6.1 (medium), 2017-08-14: The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows…
• CVE-2015-2944 - CVSS 4.3 (medium), 2015-06-02: Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to…