https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T05:21:54.597438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01385 bdu:2024-01385 2026-10-24T05:21:54.620315+00:00 bdu:2024-01385 https://cve.radiocsirt.org/vuln/cnvd-2024-27492 cnvd-2024-27492 2026-10-24T05:21:54.620352+00:00 cnvd-2024-27492 https://cve.radiocsirt.org/vuln/euvd-2026-238689 EUVD-2026-238689 2026-10-24T05:21:54.620368+00:00 EUVD-2026-238689 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23673 fkie_cve-2024-23673 2026-10-24T05:21:54.620380+00:00

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script.

Users are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not.

 https://cve.radiocsirt.org/vuln/ghsa-h2rq-qhr7-53gm GHSA-h2rq-qhr7-53gm — Apache Sling Servlets Resolver executes malicious code via path traversal 2026-10-24T05:21:54.620412+00:00

Affected: Maven: org.apache.sling:org.apache.sling.servlets.resolver

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script.

Users are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not.

 https://cve.radiocsirt.org/vuln/gsd-2024-23673 gsd-2024-23673 2026-10-24T05:21:54.620439+00:00 gsd-2024-23673 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0307 WID-SEC-W-2024-0307 — Apache Sling: Schwachstelle ermöglicht Codeausführung 2026-10-24T05:21:54.620450+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Sling ausnutzen, um beliebigen Programmcode auszuführen.