{"action":"Upgrade org.apache.sling:org.apache.sling.api to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.api","cve_ids":["CVE-2013-2254"],"ecosystem":"Maven","epss":0.04093,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-cxwh-vmhg-39r2","id":"tcs_01M5N8TNRAKX4NTN1MQWD3BZDP","modified_at":"2024-12-06T05:35:23.629453Z","published_at":"2022-05-17T01:36:04Z","references":["https://osv.dev/vulnerability/GHSA-cxwh-vmhg-39r2","https://nvd.nist.gov/vuln/detail/CVE-2013-2254","https://exchange.xforce.ibmcloud.com/vulnerabilities/87765","https://issues.apache.org/jira/browse/SLING-2913","http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4pue6PnESsP1KTdEDJm1gpkANFaK%2BvUd9mzEVT7tXL%2B3A%40mail.gmail.com%3E"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cxwh-vmhg-39r2","url":"https://osv.dev/vulnerability/GHSA-cxwh-vmhg-39r2"}],"summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling"}