CVE-2023-25141
1 advisory.
Maven/org.apache.sling:org.apache.sling.jcr.base CVE-2023-25141: high 7.5
Command injection in Apache Sling
Action: Upgrade org.apache.sling:org.apache.sling.jcr.base to 3.1.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.12 | - |
Fixed versions
| 3.1.12 |
Sources
- osv: GHSA-gvg3-83q4-rfhq
- https://nvd.nist.gov/vuln/detail/CVE-2023-25141
- https://github.com/apache/sling-org-apache-sling-jcr-base/commit/6ed0a030fd5f13774aff0073c55cbe3ace0153cb
- https://github.com/apache/sling-org-apache-sling-jcr-base/commit/779d8a7dd0437a4f31de02c0d995afcf83b9904b
- https://github.com/apache/sling-org-apache-sling-jcr-base
- https://issues.apache.org/jira/browse/SLING-11770
- https://sling.apache.org/news.html
CVE-2023-25141 · published · modified · JSON