CVE-2017-15700 Apache Sling Authentication Service vulnerability
Attackers can trick victims into sending credentials via the Sling login form, leading to account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-15700?
CVE-2017-15700 is a high-severity vulnerability in Apache Sling, published on 18 Dec 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.
Weakness: CWE-200
Which versions are affected by CVE-2017-15700?
2 open source packages ship an affected version, including org.apache.sling:org.apache.sling.auth.core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.apache.sling:org.apache.sling.auth.core Maven | From 1.4.0 | 1.4.2 |
org.apache.sling:org.apache.sling.auth.core Maven | From 1.4.0 | 1.4.2 |
Products include Apache Sling Authentication Service.
How do I fix CVE-2017-15700?
Upgrade org.apache.sling:org.apache.sling.auth.core to 1.4.2 or later.
Is CVE-2017-15700 being exploited?
There is no known exploitation of CVE-2017-15700 in the wild and no public exploit code.
Sources
Also known as GHSA-vcvp-89fq-hwj8.