Maven/org.apache.sling:org.apache.sling.servlets.post CVE-2016-0956: high 7.5, EPSS 51.15%
Exposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets Post
Action: Upgrade org.apache.sling:org.apache.sling.servlets.post to 2.3.8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.8 | - |
Fixed versions
| 2.3.8 |
Sources
- osv: GHSA-m27m-628v-xxp2
- https://nvd.nist.gov/vuln/detail/CVE-2016-0956
- https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
- https://www.exploit-db.com/exploits/39435
- http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/48
- http://www.securityfocus.com/archive/1/537498/100/0/threaded
CVE-2016-0956 · published · modified · JSON