Lucene search
Veracode Vulnerability DatabaseVERACODE:38807HistoryJan 10, 2023 - 2:36 a.m.
Cross-site Scripting (XSS)
2023-01-1002:36:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
org.apache.sling.cms.ui
javascriptinjection
sitegroupfeature
securityvulnerability
software
0.001 Low
EPSS
Percentile
38.4%
org.apache.sling.cms.ui is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because the library does not properly encode the resource.path variable before being rendered, allowing an attacker to inject and execute malicious JavaScript through the site group feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache sling - cms ui | le | 1.1.2 | |
| apache sling - cms ui | le | 1.1.2 |
Related
cvelist
cvelist
CVE-2022-46769 Apache Sling App CMS: XSS in CMS Site Group Detail
2023-01-09 10:14:56
prion
prion
Cross site scripting
2023-01-09 11:15:00
cve
cve
CVE-2022-46769
2023-01-09 11:15:10
github
github
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
2023-01-09 12:30:18
osv
osv
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
2023-01-09 12:30:18
CVE-2022-46769
2023-01-09 11:15:10
nvd
nvd
CVE-2022-46769
2023-01-09 11:15:10