medium
CVE-2026-92001
Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue.
امتیاز CVSS
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
تحلیلِ بردارِ CVSS
- CWE
- CWE-776
- تاریخ انتشار
- ۱ مهر ۱۴۰۵