Description

The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings.

Remediation

References

http://packetstormsecurity.com/files/143758/Apache-Sling-Servlets-Post-2.3.20-Cross-Site-Scripting.html

http://www.securityfocus.com/archive/1/541024/100/0/threaded

http://www.securityfocus.com/bid/100284

https://issues.apache.org/jira/browse/SLING-7041

https://lists.apache.org/thread.html/2f4b8333e44c6e7e0b00933bd4204ce64829952f60dbb6814f2cdf91%40%3Cdev.sling.apache.org%3E

Related Vulnerabilities

CVE-2019-10158 Vulnerability in maven package org.infinispan:infinispan-spring5-remote

CVE-2016-10694 Vulnerability in npm package alto-saxophone

CVE-2018-6873 Vulnerability in npm package auth0-js

CVE-2022-1330 Vulnerability in maven package org.webjars.bower:fullpage.js

CVE-2018-19827 Vulnerability in npm package node-sass

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory VDB Entry Issue Tracking Vendor Advisory