GCVE - cpe:2.3:a:apache_software_foundation:apache_sling_security

Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_sling_security_bundle:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apache Software Foundation (`f563070d-e18f-561b-b86c-987936937e8a`)
Product	Apache Sling Security Bundle (`096472c6-e937-5e2e-93e2-32d3267f33a1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-94251`	vulnerable	2026-10-13 12:28:38.910671	Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue. Published: 2026-09-23T09:42:27.928Z Updated: 2026-09-23T17:08:17.694Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/7zo0drh75qmk1xn7940hy4pxjs6h2b10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-94243`	vulnerable	2026-10-13 12:28:38.772911	Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue. Published: 2026-09-23T09:43:49.174Z Updated: 2026-09-23T17:08:16.712Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/ohz47f6hrflsjvt9m24qz69qm5w4bwyr	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.