{"id":"GHSA-mg46-f9h5-g27x","summary":"Apache Sling Engine vulnerable to cross-site scripting (XSS) that can lead to privilege escalation","details":"The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resource with specific content-type and control the include path (i.e. writing content). The impact of a successful attack is privilege escalation to administrative power.\n\nPlease update to Apache Sling Engine version 2.14.0 or newer and enable the \"Check Content-Type overrides\" configuration option.\n\n\n\n\n","aliases":["CVE-2022-45064"],"modified":"2023-11-01T05:00:20.654617Z","published":"2023-04-13T12:30:35Z","database_specific":{"cwe_ids":["CWE-79"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2023-04-14T16:14:10Z","nvd_published_at":"2023-04-13T11:15:00Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45064"},{"type":"PACKAGE","url":"https://github.com/apache/sling-org-apache-sling-engine"},{"type":"WEB","url":"https://lists.apache.org/thread/hhp611hltby3whk03vx2mv7cmy3vs0ok"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/04/18/6"}],"affected":[{"package":{"name":"org.apache.sling:org.apache.sling.engine","ecosystem":"Maven","purl":"pkg:maven/org.apache.sling/org.apache.sling.engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0"}]}],"versions":["2.0.2-incubator","2.0.4-incubator","2.0.6","2.1.0","2.10.2","2.11.0","2.12.0","2.12.2","2.13.0","2.2.0","2.2.10","2.2.2","2.2.4","2.2.6","2.2.8","2.3.0","2.3.10","2.3.2","2.3.4","2.3.6","2.3.8","2.4.0","2.4.2","2.4.4","2.4.6","2.5.0","2.6.0","2.6.10","2.6.12","2.6.14","2.6.16","2.6.18","2.6.2","2.6.20","2.6.22","2.6.4","2.6.6","2.6.8","2.7.10","2.7.2","2.7.4","2.7.6","2.7.8","2.8.0","2.9.0","2.9.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H"}]}