Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2013-4390

EPSS 1.32% · P80
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-4390

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Sling 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Sling是美国阿帕奇（Apache）基金会的一个 Java 平台的开源 Web 框架。旨在在符合 JSR-170 的内容存储库（例如 Apache Jackrabbit ）上创建以内容为中心的应用程序。 Apache Sling中的Auth Core (org.apache.sling.auth.core)组件1.1.2及之前的版本中的AbstractAuthenticationFormServlet类中存在输入验证错误漏洞，该漏洞源于程序没有正确过滤用户提交到‘resource’参数的输
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-4390

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-4390

请登录查看更多情报信息。

Same Patch Batch · n/a · 2013-10-24 · 52 CVEs total

CVE-2013-5188Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞
CVE-2013-5537Cisco WSA/ESA/Content SMA Web框架拒绝服务漏洞
CVE-2013-5536Cisco Secure ACS 防火墙模块拒绝服务漏洞
CVE-2013-1743Bugzilla 跨站脚本漏洞
CVE-2013-5143Apple OS X Server Server App 设计错误漏洞
CVE-2013-5130Apple Safari WebKit 信息泄露漏洞
CVE-2013-4299Linux Kernel 信息泄露漏洞
CVE-2013-5148Apple Keynote 权限许可和访问控制漏洞
CVE-2013-5190Apple Mac OS X Smart Card Services 权限许可和访问控制漏洞
CVE-2013-5189Apple Mac OS X 权限许可和访问控制漏洞
CVE-2013-5191Apple Mac OS X syslog功能权限许可和访问控制漏洞
CVE-2013-5187Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞
CVE-2013-5186Apple Mac OS X Power Management 权限许可和访问控制漏洞
CVE-2013-5185Apple Mac OS X ldapsearch命令行程序加密问题漏洞
CVE-2013-5184Apple Mac OS X kernel 拒绝服务漏洞
CVE-2013-5183Apple Mac OS X Mail 信息泄露漏洞
CVE-2013-5182Apple Mac OS X Mail 加密问题漏洞
CVE-2013-5181Apple Mac OS X Mail 加密问题漏洞
CVE-2013-5180Apple Mac OS X Libc 加密问题漏洞
CVE-2013-5179Apple Mac OS X App Sandbox 安全绕过漏洞

Showing top 20 of 52 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-4390

No comments yet

Leave a comment