cve-2026-103864

fkie_nvd
Description

Improper output neutralization for logs in Apache Sling Engine. This issue affects Apache Sling Engine: before 3.0.4. Users are recommended to upgrade to version 3.0.4, which fixes the issue.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

Weaknesses (CWE)
CWE-117
NVD metadata
NVD status
Received
Source identifier
security@apache.org
References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Sling Engine",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "3.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@apache.org"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper output neutralization for logs in Apache Sling Engine.\n\n\n\nThis issue affects Apache Sling Engine: before 3.0.4.\n\n\n\nUsers are recommended to upgrade to version 3.0.4, which fixes the issue."
    }
  ],
  "id": "CVE-2026-103864",
  "lastModified": "2026-11-05T13:17:07.017",
  "metrics": {},
  "published": "2026-11-05T13:17:07.017",
  "references": [
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/bchcm9xhz5zdqwykrdo4kw21j8gz6q55"
    }
  ],
  "sourceIdentifier": "security@apache.org",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-117"
        }
      ],
      "source": "security@apache.org",
      "type": "Primary"
    }
  ]
}
View JSON API Download JSON