Description
The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
Remediation
References
http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html
http://seclists.org/fulldisclosure/2016/Feb/48
http://www.securityfocus.com/archive/1/537498/100/0/threaded
https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
https://www.exploit-db.com/exploits/39435/
Related Vulnerabilities
CVE-2023-24998 Vulnerability in maven package commons-fileupload:commons-fileupload
CVE-2023-26473 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2023-40028 Vulnerability in npm package ghost
CVE-2016-2515 Vulnerability in npm package hawk
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15to18