CVE-2022-46769 — Apache Sling App CMS: XSS in CMS Site Group Detail

CVE-2022-46769

Apache Sling App CMS: XSS in CMS Site Group Detail PUBLISHED

Description (CNA)

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature. Upgrade to Apache Sling App CMS >= 1.1.4

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Sling App CMS	affected 0 before 1.1.4

CWE

CWE-79

References

https://sling.apache.org/news.html

ADP enrichment

CVE

No English description supplied.

https://sling.apache.org/news.html

CISA-ADP

No English description supplied.

No references supplied.