CVE-2023-25621: Improper Privilege Management in Apache Sling
Summary
CVE-2023-25621: Improper Privilege Management in Apache Sling. Affects org.apache.sling:org.apache.sling.i18n versions < 2.6.2. Fixed in 2.6.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Sling is an open-source web framework built on top of the Java Content Repository (JCR) technology. It provides a RESTful framework for building web applications and content-driven websites. The Apache Sling i18n module is responsible for handling internationalization and localization of text and messages within the application. This module allows content authors to create i18n dictionaries in the repository, which are used to translate text across the entire product.
Vulnerability Detail
The Apache Sling i18n module suffers from an improper privilege management vulnerability. Any content author with write access to the repository can create i18n dictionaries in any location they have access to. This allows an attacker to change the text or dialog of any part of the product. For example, an attacker could modify the text on a delete button to deceive users. This vulnerability affects Apache Sling versions prior to 2.6.2. Starting from version 2.6.2, the module restricts i18n dictionaries to specific paths in the repository (/libs and /apps) by default. Users of the module are advised to update to version 2.6.2 or higher, review the resource loading configuration, and adjust access permissions for the configured path accordingly.
How To Fix
Minimum fixed version
2.6.2
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating to Apache Sling version 2.6.2 or higher.
Conclusion
The Apache Sling i18n module in versions prior to 2.6.2 is vulnerable to improper privilege management, allowing content authors to modify text and dialogs within the product. Users are advised to update to version 2.6.2 or higher, review the configuration, and adjust access permissions to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.apache.sling:org.apache.sling.i18n →
FAQ
Apache Sling is an open-source web framework for building content-driven applications and websites. It provides a RESTful framework on top of the Java Content Repository (JCR) technology.
The Apache Sling i18n module is responsible for handling internationalization and localization of text and messages within Apache Sling applications. It allows content authors to create i18n dictionaries for translating text across the product.
This vulnerability allows any content author with write access to the repository to modify text and dialogs within the product. It can be exploited to deceive users or introduce malicious content.
Versions of Apache Sling prior to 2.6.2 are affected by this vulnerability.
To fix this vulnerability, update the Apache Sling i18n module to version 2.6.2 or higher, review the resource loading configuration, and adjust access permissions for the configured path.
