-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.sling:org.apache.sling.xss | maven | >= 1.0.4, < 2.0.4 | 2.0.4 |
| org.apache.sling:org.apache.sling.xss.compat | maven | = 1.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability documentation explicitly identifies these two methods as the core validation points that failed to properly sanitize href values. Both functions are part of the XSS protection API's implementation classes and would be involved in processing untrusted URL inputs during output generation. Their presence in stack traces would indicate active validation of potentially malicious href attributes.