[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv7YBs_bqJz6Hil28BJCJ6ZVuNZ_2j1Pb-OLnEVW0J_w":3,"g5a-ex:apache\u002Forg.apache.sling.servlets.post@*":66,"g5a-family:apache\u002Forg.apache.sling.servlets.post":68},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":43,"seoMetadata":44,"meta":63},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"apache","org.apache.sling.servlets.post",4,2,0,"2013-10-17",[14,17,19,22],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"2.2.0",1,{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},"2.3.0","Org.apache.sling.servlets.post by Apache is a technology product with 4 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28,29],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},[31,39],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":16,"epssScore":38},"CVE-2012-2138","The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.","2012-07-09",5,"v2","Medium",0.14122,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":16,"epssScore":42},"CVE-2013-2254","The deepGetOrCreateNode function in impl\u002Foperations\u002FAbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.",0.04093,[],{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Org.apache.sling.servlets.post by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Org.apache.sling.servlets.post by Apache covering 4 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Org.apache.sling.servlets.post vulnerabilities, Org.apache.sling.servlets.post security, Org.apache.sling.servlets.post CVE, Apache Org.apache.sling.servlets.post, Org.apache.sling.servlets.post threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52,"manufacturer":53,"applicationCategory":57,"softwareVersion":58,"mainEntity":59},"https:\u002F\u002Fschema.org","SoftwareApplication","Org.apache.sling.servlets.post","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Forg.apache.sling.servlets.post",{"@type":54,"name":55,"url":56},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","4 versions tracked",{"@type":60,"name":61,"description":62,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Org.apache.sling.servlets.post Security Vulnerabilities","Security vulnerabilities affecting Org.apache.sling.servlets.post by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":64,"apiVersion":65},"2026-10-18T21:24:28.478Z","3.0",{"rows":67,"total":11,"capped":16,"failed":11},[],[]]