CVE-2022-47937

Maven/org.apache.sling:org.apache.sling.commons.json CVE-2022-47937: critical 9.8, EPSS 2.19%

Apache Sling Commons JSON bundle vulnerable to Improper Input Validation

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-8j28-34qq-gmch
• https://nvd.nist.gov/vuln/detail/CVE-2022-47937
• https://github.com/apache/sling-org-apache-sling-commons-johnzon
• https://issues.apache.org/jira/browse/SLING-6536
• https://lists.apache.org/thread/sws7z50x47gv0c38q4kx6ktqrvrrg1pm
• https://www.openwall.com/lists/oss-security/2023/05/15/2
• http://www.openwall.com/lists/oss-security/2023/05/15/2

CVE-2022-47937 · published 2023-05-15T12:30:16Z · modified 2024-03-29T14:48:46.905689Z · JSON