Filtered by vendor Apache Subscriptions
Filtered by product Sling Authentication Service Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-15700 1 Apache 1 Sling Authentication Service 2025-04-20 N/A
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.