CVE-2012-3353
Last modified
CVE-2012-3353 is a vulnerability of currently unknown severity. The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader. EPSS estimates a 3.14% chance of exploitation in the next 30 days.
Description
The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Sling Jcr Contentloader | 2.1.4 |
References
- https://issues.apache.org/jira/browse/SLING-2512Vendor Advisory
- https://issues.apache.org/jira/browse/SLING-2512Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-3353?
How severe is CVE-2012-3353?
How do I fix CVE-2012-3353?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-3342Unspecified vulnerability in the Java Runtime Environment (J…
- CVE-2012-3343Cross-site request forgery (CSRF) vulnerability in Microdasy…
- CVE-2012-3345ioquake3 before r2253 allows local users to overwrite arbitr…
- CVE-2012-3347AutoFORM PDM Archive before 7.0 implements user accounts in …
- CVE-2012-3350SQL injection vulnerability in index.php in Webmatic 3.1.1 a…
- CVE-2012-3351Multiple cross-site scripting (XSS) vulnerabilities in LongT…6.1
- CVE-2012-3354doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when…
- CVE-2012-3355(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) …
- CVE-2012-3356The remote SVN views functionality (lib/vclib/svn/svn_ra.py)…
- CVE-2012-3357The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC…
- CVE-2012-3358Multiple heap-based buffer overflows in the j2k_read_sot fun…
- CVE-2012-3359Luci in Red Hat Conga stores the user's username and passwor…
Are you affected by CVE-2012-3353?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST