Apache Sling Authentication Service vulnerabilities

1 known vulnerability affecting apache/sling_authentication_service.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2017-15700HIGHCVSS 8.8v1.4.02017-12-18
CVE-2017-15700 [HIGH] CWE-200 CVE-2017-15700: A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authenticat A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.
nvd