CVE-2026-103866: CVE-2026-103866: güvenlik açığı

Açıklama (NVD)

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before 3.0.4. Users are recommended to upgrade to version 3.0.4, which fixes the issue.

Özet bilgiler

EPSS

%0,21 (yüzdelik 12)

CWE

CWE-436

Yama

Yok / bilinmiyor

İlgili haberler

• Apache Projelerinde Çoklu Güvenlik Zafiyeti Tespit Edildi

Kaynaklar

• NVD kaydı
• lists.apache.org
• www.openwall.com
• CWE-436