CVE-2012-3353

State: Published
Severity: Not scored
Published: Jan 8, 2018
Updated: Sep 16, 2024
Reserved: Jun 14, 2012

Description

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache SlingApache Software Foundation	JCR ContentLoader 2.1.4Affected

References

[dev] 20180108 CVE-2012-3353: Apache Sling Content Loading Vulnerabilitymailing-list
https://issues.apache.org/jira/browse/SLING-2512

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.