Junglewise Threat Intelligence

CVE-2022-43670: Apache Sling App CMS vulnerable to Cross-site Scripting

CVE-2022-43670 · Severity: low · CVSS 3.1 · Published 2022-11-02

Technologies: org.apache.sling:org.apache.sling.cms (Maven). Vendors: Maven.

Executive brief

Apache Sling App CMS vulnerable to Cross-site Scripting

Affected products

  • Maven org.apache.sling:org.apache.sling.cms

Related threats