Lucene search
Veracode Vulnerability DatabaseVERACODE:39920HistoryMar 23, 2023 - 7:21 p.m.
Denial Of Service (DoS)
2023-03-2319:21:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
denial of service
apache sling
resource merger
getrelativepath
mergedresourceprovider
iteration logic
infinite loop
cpu memory
system crash
vulnerability
0.002 Low
EPSS
Percentile
60.4%
Apache Sling Resource Merger is vulnerable to Denial of Service (DoS). The vulnerability is due to a faulty iteration logic in the function getRelativePath in MergedResourceProvider, triggering an infinite loop and consuming excessive CPU memory, possibly leading to a system crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache sling resource merger | le | 1.4.0 | |
| apache sling resource merger | le | 1.4.0 |
Related
osv
osv
Apache Sling Resource Merger has Excessive Iteration vulnerability
2023-03-20 15:30:20
github
github
Apache Sling Resource Merger has Excessive Iteration vulnerability
2023-03-20 15:30:20
cvelist
cvelist
prion
prion
Code injection
2023-03-20 13:15:00
nvd
nvd
CVE-2023-26513
2023-03-20 13:15:11
cve
cve
CVE-2023-26513
2023-03-20 13:15:11
adobe
adobe
APSB23-31 : Security update available for Adobe Experience Manager
2023-06-13 00:00:00