CVE-2012-3353

Description

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.321

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-3353 are fixed in Apache-org.apache.sling.jcr.contentloader 2.1.6	Windows
Vulnerabilities CVE-2012-3353 are fixed in Apache-org.apache.sling.jcr.contentloader for Linux 2.1.6	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234