Non évaluée

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative co...

CVE-2020-1949 Première détection SecPulse Apr 2, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory s.apache.org

Faits clés

Gravité: Non évaluée
Publication: Apr 2, 2020
Première détection SecPulse: Apr 2, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52