Lucene search
PRIOn knowledge basePRION:CVE-2013-2254HistoryOct 17, 2013 - 11:55 p.m.
Code injection
2013-10-1723:55:00
PRIOn knowledge base
www.prio-n.com
The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.apache.sling.servlets.post | eq | 2.2.0 | |
| org.apache.sling.servlets.post | eq | 2.3.0 |
Related
cve
cve
CVE-2013-2254
2013-10-17 23:55:04
osv
osv
cvelist
cvelist
CVE-2013-2254
2013-10-17 23:00:00
nvd
nvd
CVE-2013-2254
2013-10-17 23:55:04
github
github