CVE-2013-4390

Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows…

published October 24, 2013

CVSS
—
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03056 · 87.5th percentile
Published
2013-10-24T01:00Z
EPSS history
Timeline
  • 24 OCT 01:00Z
    Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows…
    cvelistv5