CVE-2017-15700
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.9%
exploitation probability
1.9%top 22% of all CVEs
observed exploitation
nono source reports it
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.
Affected products
Apache Software Foundation · Apache Sling