CVE-2013-4390: Apache Sling Auth Core bundle vulnerable to Open Redirection
Summary
CVE-2013-4390: Apache Sling Auth Core bundle vulnerable to Open Redirection. Affects org.apache.sling:org.apache.sling.auth.core versions < 1.1.4. Fixed in 1.1.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Apache Sling Auth Core bundle (org.apache.sling.auth.core) is a component of the Apache Sling framework that provides authentication and authorization capabilities. It is commonly used in web applications built on top of the Apache Sling platform. This bundle allows developers to implement custom login forms and handle user authentication. However, versions before 1.1.4 are vulnerable to an open redirection attack, which can lead to phishing attacks and unauthorized redirects to arbitrary websites.
Vulnerability Detail
The vulnerability in the Apache Sling Auth Core bundle allows remote attackers to exploit an open redirect vulnerability in the AbstractAuthenticationFormServlet. By manipulating the 'resource' parameter in a URL, attackers can trick users into visiting malicious websites or disclose sensitive information. This vulnerability is related to a custom login form and cross-site scripting (XSS) attacks. The impact of this vulnerability can be significant, as it can be used to deceive users and steal their credentials or conduct phishing attacks.
How To Fix
Minimum fixed version
1.1.4
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the patched version of the Apache Sling Auth Core bundle.
Conclusion
The Apache Sling Auth Core bundle is vulnerable to an open redirection attack, which can lead to phishing attacks and unauthorized redirects. To mitigate this vulnerability, it is crucial to upgrade to version 1.1.4 or later of the bundle. Additionally, developers should validate and sanitize user input to prevent cross-site scripting attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.sling:org.apache.sling.auth.core →
FAQ
This vulnerability allows attackers to redirect users to arbitrary websites, potentially leading to phishing attacks and unauthorized disclosure of sensitive information.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using just the pom.xml file.
No, there is no known workaround for this vulnerability. It is crucial to upgrade to the patched version of the Apache Sling Auth Core bundle.
Yes, this vulnerability is associated with CWE-601, which is the identifier for URL Redirection to Untrusted Site ('Open Redirect').
The severity of this vulnerability is rated as MODERATE. The CVSS score for this vulnerability is 4.7.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.sling:org.apache.sling.auth.core.
