Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-94251 1 Apache 1 Sling Security Bundle 2026-09-24 6.5 Medium
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue.
CVE-2026-94243 1 Apache 1 Sling Security Bundle 2026-09-24 7.3 High
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue.