CVE-2012-3353
1 advisory.
Maven/org.apache.sling:org.apache.sling.jcr.contentloader CVE-2012-3353: high 7.5, EPSS 3.14%
Apache Sling JCR ContentLoader XmlReader Arbitrary File Load
Action: Upgrade org.apache.sling:org.apache.sling.jcr.contentloader to 2.1.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.6 | - |
Fixed versions
| 2.1.6 |
Sources
- osv: GHSA-wjp3-4xcq-598p
- https://nvd.nist.gov/vuln/detail/CVE-2012-3353
- https://issues.apache.org/jira/browse/SLING-2512
- https://lists.apache.org/thread/owd2xw86l19dh1f1zlhq41l7wlnd16sk
CVE-2012-3353 · published · modified · JSON