Junglewise Threat Intelligence

CVE-2017-15717: Cross-site Scripting in Apache Sling XSS Protection API

CVE-2017-15717 · Severity: low · CVSS 3 · Published 2022-05-14

Technologies: org.apache.sling:org.apache.sling.xss.compat (Maven), org.apache.sling:org.apache.sling.xss (Maven). Vendors: Maven.

Executive brief

Cross-site Scripting in Apache Sling XSS Protection API

Affected products

  • Maven org.apache.sling:org.apache.sling.xss.compat
  • Maven org.apache.sling:org.apache.sling.xss

Related threats