-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the absence of path validation in the copy operation. The commit diff shows a new isAncestorOrSameNode check was added to prevent ancestor->descendant copies. The vulnerable versions lacked this check in the copy method, making it possible to trigger recursive copying loops. The JIRA ticket SLING-2517 explicitly references this missing validation as the root cause.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.sling:org.apache.sling.servlets.post | maven | < 2.1.2 | 2.1.2 |