Apache Sling XSS before 2.4.14 allows XSS via getStyleToken (CVE-2026-123765)
xssAPI.getStyleToken() accepts markup in unquoted URLs; Apache rates it low and fixes it in 2.4.14.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #sling
Apache Sling Engine before 3.0.4 vulnerable to HTTP request smuggling (CVE-2026-103866)
Apache Sling Engine before 3.0.4 allows HTTP request smuggling by accepting non-standard percent-escapes.
CVE-2026-91928: Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms
Apache Sling XSS before 2.4.12 has a moderate XSS sanitizer bypass, CVE-2026-91928.