Apache Sling Xss Protection API Compat
1 CVEs affecting Apache Sling Xss Protection API Compat. Latest disclosed: 2018-01-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15717 | Medium | 6.1 | 2018-01-10 | A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref… |