advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard
verified publisher icon github

[GHSA-qmx3-m648-hr74] Log Injection in Apache Sling Commons Log and Apache Sling API

Open SunBK201 opened this issue 1 year ago • 1 comments

Updates

  • Affected products

Comments https://mvnrepository.com/artifact/org.apache.sling/org.apache.sling.api

SunBK201 avatar Jun 05 '24 15:06 SunBK201

Hi @SunBK201, https://mvnrepository.com/artifact/org.apache.sling/org.apache.sling.api doesn't say anything about version 2.25.4 containing a patch for GHSA-qmx3-m648-hr74. Do you have other links supporting adding 2.25.4 as a patched version?

shelbyc avatar Jun 05 '24 16:06 shelbyc