CVE-2013-2254

NONECVSS 0.0

0.0

The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.

🔗 References (10)

secalert@redhathttp://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4pue6PnESsP1KTdEDJm1gpkANFaK%2BvUd9mzEVT7tXL%2B3A%40mail.gmail.com%3E
secalert@redhathttp://secunia.com/advisories/55157
secalert@redhathttp://www.securityfocus.com/bid/62903
secalert@redhathttps://exchange.xforce.ibmcloud.com/vulnerabilities/87765
secalert@redhathttps://issues.apache.org/jira/browse/SLING-2913
af854a3a-2127-422b-91ae-364da2661108http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4pue6PnESsP1KTdEDJm1gpkANFaK%2BvUd9mzEVT7tXL%2B3A%40mail.gmail.com%3E
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/55157
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/62903
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/87765
af854a3a-2127-422b-91ae-364da2661108https://issues.apache.org/jira/browse/SLING-2913

Is Your Infrastructure Affected by CVE-2013-2254?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2013-2254

📅 Published

🔄 Last Modified

🔗 References (10)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2013-2254?