Description
The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
Remediation
References
http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html
http://seclists.org/fulldisclosure/2016/Feb/48
http://www.securityfocus.com/archive/1/537498/100/0/threaded
https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
https://www.exploit-db.com/exploits/39435/
Related Vulnerabilities
CVE-2021-44906 Vulnerability in maven package org.webjars.bowergithub.substack:minimist
CVE-2023-26108 Vulnerability in npm package @nestjs/core
CVE-2023-36665 Vulnerability in npm package protobufjs
CVE-2023-37943 Vulnerability in maven package org.jenkins-ci.plugins:active-directory
CVE-2023-49446 Vulnerability in maven package com.jfinal:jfinal