CVE-2024-23673 PoC — Apache Sling Servlets Resolver: Malicious code execution via path traversal

Source

https://github.com/shoucheng3/apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0

Associated Vulnerability

Title:Apache Sling Servlets Resolver: Malicious code execution via path traversal (CVE-2024-23673)
Description:Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script. Users are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not.

Readme

[![Apache Sling](https://sling.apache.org/res/logos/sling.png)](https://sling.apache.org)

&#32;[![Build Status](https://ci-builds.apache.org/job/Sling/job/modules/job/sling-org-apache-sling-servlets-resolver/job/master/badge/icon)](https://ci-builds.apache.org/job/Sling/job/modules/job/sling-org-apache-sling-servlets-resolver/job/master/)&#32;[![Test Status](https://img.shields.io/jenkins/tests.svg?jobUrl=https://ci-builds.apache.org/job/Sling/job/modules/job/sling-org-apache-sling-servlets-resolver/job/master/)](https://ci-builds.apache.org/job/Sling/job/modules/job/sling-org-apache-sling-servlets-resolver/job/master/test/?width=800&height=600)&#32;[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=apache_sling-org-apache-sling-servlets-resolver&metric=coverage)](https://sonarcloud.io/dashboard?id=apache_sling-org-apache-sling-servlets-resolver)&#32;[![Sonarcloud Status](https://sonarcloud.io/api/project_badges/measure?project=apache_sling-org-apache-sling-servlets-resolver&metric=alert_status)](https://sonarcloud.io/dashboard?id=apache_sling-org-apache-sling-servlets-resolver)&#32;[![JavaDoc](https://www.javadoc.io/badge/org.apache.sling/org.apache.sling.servlets.resolver.svg)](https://www.javadoc.io/doc/org.apache.sling/org.apache.sling.servlets.resolver)&#32;[![Maven Central](https://maven-badges.herokuapp.com/maven-central/org.apache.sling/org.apache.sling.servlets.resolver/badge.svg)](https://search.maven.org/#search%7Cga%7C1%7Cg%3A%22org.apache.sling%22%20a%3A%22org.apache.sling.servlets.resolver%22)&#32;[![servlets](https://sling.apache.org/badges/group-servlets.svg)](https://github.com/apache/sling-aggregator/blob/master/docs/groups/servlets.md) [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://www.apache.org/licenses/LICENSE-2.0)

# Apache Sling Servlet Resolver

This module is part of the [Apache Sling](https://sling.apache.org) project.

Bundle implementing the Sling API ServletResolver. See the [servlets](https://sling.apache.org/documentation/the-sling-engine/servlets.html) and [scripts](https://sling.apache.org/documentation/bundles/scripting.html) documentation for how this works.

File Snapshot


 [4.0K]  /data/pocs/146a230602f9618bd177f2dc66bfb23032561024
├── [1.1K]  bnd.bnd
├── [1.2K]  CODE_OF_CONDUCT.md
├── [1.1K]  CONTRIBUTING.md
├── [1.2K]  findbugs-exclude.xml
├── [ 833]  Jenkinsfile
├── [ 11K]  LICENSE
├── [ 17K]  pom.xml
├── [2.1K]  README.md
└── [4.0K]  src
    ├── [4.0K]  main
    │   └── [4.0K]  java
    │       └── [4.0K]  org
    │           └── [4.0K]  apache
    │               └── [4.0K]  sling
    │                   └── [4.0K]  servlets
    │                       └── [4.0K]  resolver
    │                           ├── [4.0K]  internal
    │                           │   ├── [4.0K]  bundle
    │                           │   │   ├── [2.6K]  BundledHooks.java
    │                           │   │   ├── [ 10K]  BundledRenderUnitCapabilityImpl.java
    │                           │   │   ├── [4.8K]  BundledScriptServlet.java
    │                           │   │   ├── [ 41K]  BundledScriptTracker.java
    │                           │   │   ├── [3.7K]  RequestWrapper.java
    │                           │   │   └── [2.5K]  TypeProviderImpl.java
    │                           │   ├── [4.0K]  console
    │                           │   │   └── [ 19K]  WebConsolePlugin.java
    │                           │   ├── [4.0K]  defaults
    │                           │   │   ├── [ 14K]  DefaultErrorHandlerServlet.java
    │                           │   │   └── [2.2K]  DefaultServlet.java
    │                           │   ├── [1.3K]  HandleErrorResponseWriter.java
    │                           │   ├── [1.8K]  HandleErrorSlingHttpServletResponse.java
    │                           │   ├── [4.0K]  helper
    │                           │   │   ├── [ 13K]  AbstractResourceCollector.java
    │                           │   │   ├── [ 12K]  LocationCollector.java
    │                           │   │   ├── [6.4K]  NamedScriptResourceCollector.java
    │                           │   │   ├── [ 18K]  ResourceCollector.java
    │                           │   │   ├── [3.1K]  SearchPathProvider.java
    │                           │   │   └── [4.7K]  WeightedResource.java
    │                           │   ├── [5.6K]  PathBasedServletAcceptor.java
    │                           │   ├── [4.0K]  resolution
    │                           │   │   └── [ 11K]  ResolutionCache.java
    │                           │   ├── [4.8K]  ResolverConfig.java
    │                           │   ├── [4.0K]  resource
    │                           │   │   ├── [8.9K]  MergingServletResourceProvider.java
    │                           │   │   ├── [ 15K]  ServletMounter.java
    │                           │   │   ├── [5.5K]  ServletResource.java
    │                           │   │   ├── [ 15K]  ServletResourceProviderFactory.java
    │                           │   │   ├── [3.6K]  ServletResourceProvider.java
    │                           │   │   └── [3.4K]  SlingServletConfig.java
    │                           │   ├── [4.1K]  ScriptResourceDecorator.java
    │                           │   ├── [6.4K]  ScriptResource.java
    │                           │   ├── [6.8K]  ScriptResourceResolver.java
    │                           │   ├── [4.1K]  SlingScriptResolverImpl.java
    │                           │   └── [ 35K]  SlingServletResolver.java
    │                           └── [4.0K]  jmx
    │                               ├── [ 909]  package-info.java
    │                               └── [1.4K]  SlingServletResolverCacheMBean.java
    └── [4.0K]  test
        └── [4.0K]  java
            └── [4.0K]  org
                └── [4.0K]  apache
                    └── [4.0K]  sling
                        └── [4.0K]  servlets
                            └── [4.0K]  resolver
                                ├── [4.0K]  internal
                                │   ├── [4.0K]  bundle
                                │   │   ├── [5.1K]  BundledHooksTest.java
                                │   │   └── [1.9K]  BundledScriptTrackerTest.java
                                │   ├── [4.0K]  console
                                │   │   ├── [3.4K]  DecomposedURLTest.java
                                │   │   └── [ 15K]  WebConsolePluginTest.java
                                │   ├── [4.0K]  defaults
                                │   │   └── [8.7K]  DefaultErrorHandlerServletTest.java
                                │   ├── [1.3K]  HandleErrorSlingHttpServletResponseTest.java
                                │   ├── [4.0K]  helper
                                │   │   ├── [6.8K]  AbstractResourceCollectorTest.java
                                │   │   ├── [4.9K]  HelperTestBase.java
                                │   │   ├── [2.0K]  IsSameResourceList.java
                                │   │   ├── [ 25K]  LocationCollectorTest.java
                                │   │   ├── [ 15K]  ResourceCollectorTest.java
                                │   │   ├── [9.8K]  ScriptSelection2Test.java
                                │   │   ├── [ 10K]  ScriptSelectionTest.java
                                │   │   └── [3.4K]  WeightedResourceTest.java
                                │   ├── [ 10K]  PathBasedServletAcceptorTest.java
                                │   ├── [4.0K]  resource
                                │   │   ├── [1.9K]  MockServletResource.java
                                │   │   ├── [5.2K]  ServletMounterTest.java
                                │   │   └── [ 12K]  ServletResourceProviderCreateTest.java
                                │   ├── [7.3K]  ScriptResourceTest.java
                                │   ├── [4.3K]  SecureRequestsOptingServletTest.java
                                │   └── [4.4K]  SlingServletResolverTestBase.java
                                └── [4.0K]  it
                                    ├── [ 10K]  ServletResolverTestSupport.java
                                    ├── [5.3K]  ServletResourceIT.java
                                    ├── [8.3K]  ServletSelectionIT.java
                                    ├── [6.1K]  SLING10478IT.java
                                    ├── [2.1K]  TestResourceProvider.java
                                    ├── [1.2K]  TestServiceUserValidator.java
                                    └── [2.2K]  TestServlet.java

30 directories, 69 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!