CVE-2026-92001
2026-09-23
09h20 +00:00
09h20 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Apache Sling XSS: Missing parser resource limits
Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue.CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Restriction of Recursive Entity References in DTDs The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities. |
