{"action":"Upgrade org.apache.sling:org.apache.sling.auth.core to 1.1.4 or later.","affected":[{"fixed":"1.1.4","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.auth.core","cve_ids":["CVE-2013-4390"],"ecosystem":"Maven","epss":0.03056,"exploited":false,"fixed_versions":["1.1.4"],"ghsa_id":"GHSA-j7f2-cqvq-5jcf","id":"tcs_01M5N927NRKVTWTSMX5KYSDKB4","modified_at":"2024-02-16T08:08:24.792458Z","published_at":"2022-05-17T04:59:24Z","references":["https://osv.dev/vulnerability/GHSA-j7f2-cqvq-5jcf","https://nvd.nist.gov/vuln/detail/CVE-2013-4390","https://github.com/apache/sling-org-apache-sling-auth-core/commit/d1cd9aaa3432d577b65c50b3fbdc36d5d667ca46","https://github.com/apache/sling-org-apache-sling-auth-core","https://issues.apache.org/jira/browse/SLING-3141","http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4qdFxEW9NXBJoMsrBama8LFNyir%2B61A0Vfzp4njEpeU%3Dw%40mail.gmail.com%3E","http://secunia.com/advisories/55249","http://www.securityfocus.com/bid/63241"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-j7f2-cqvq-5jcf","url":"https://osv.dev/vulnerability/GHSA-j7f2-cqvq-5jcf"}],"summary":"Apache Sling Auth Core bundle vulnerable to Open Redirection"}