CVE-2015-2944
Beschrijving NL
Meerdere cross-site scripting (XSS) kwetsbaarheden in Apache Sling API vóór 2.2.2 en Apache Sling Servlets Post vóór 2.1.2 stellen externe aanvallers in staat om willekeurig webscript of HTML via de URI te injecteren, gerelateerd aan (1) org/apache/sling/api/servlets/HtmlResponse en (2) org/apache/sling/servlets/post/HtmlResponse.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.