6.5

CVE-2026-94251

EPSS 0.19%
Veröffentlicht 23.09.2026 09:42:27
Zuletzt bearbeitet 06.10.2026 13:54:26
Erkennungen
Login

Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource



This issue affects Apache Sling Security Bundle: before 1.3.12.



Users are recommended to upgrade to version 1.3.12, which fixes the issue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Sling Security Version < 1.3.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.078

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://lists.apache.org/thread/7zo0drh75qmk1xn7940hy4pxjs6h2b10

Vendor Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2026/09/23/17

Third Party Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2026-94251

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-94251

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-94251

EUVD