Description. A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials. Source: MITRE Last Modified: 12/18/2017 ...
from Google Alert - vulnerability http://ift.tt/2ke5eZY
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment