[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLFsw3wyPnbULEsBwLuD_C3jRDMeGuGXjJZK8rs2RaX8":3,"g5a-risk:CVE-2012-2138":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":59,"weaknesses":60,"weaknessesCount":64,"isActivelyExploited":65,"cisaInfo":15,"otxData":15,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":103,"notableEvents":104},"CVE-2012-2138","What is CVE-2012-2138?","The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.","The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an an...","2012-07-09T22:55:01.027","2025-04-11T00:51:21.963",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,2.9,0.14122,[29,29,29,29,29,29,29],"Medium",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"apache","org.apache.sling.servlets.post","*","cpe:2.3:a:apache:org.apache.sling.servlets.post:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"sling","cpe:2.3:a:apache:sling:*:*:*:*:*:*:*:*",2,[43,47,50,53,55,57],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fmail-archives.apache.org\u002Fmod_mbox\u002Fwww-announce\u002F201207.mbox\u002F%3CCAEWfVJ=PwoQmwJg0KmbrC17Gw51kgfKRsqgy=4RpMQsdGh0bVg%40mail.gmail.com%3E","Apache",[],{"url":48,"source":45,"tags":49},"http:\u002F\u002Fsvn.apache.org\u002Fviewvc?view=revision&revision=1352865",[],{"url":51,"source":45,"tags":52},"https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FSLING-2517",[],{"url":44,"source":45,"tags":54},[],{"url":48,"source":45,"tags":56},[],{"url":51,"source":45,"tags":58},[],6,[61],{"id":62,"name":62,"description":63},"Unknown","CWE-264",1,false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2012-2138? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-2138, a medium severity cyber security vulnerability from 2012. The @CopyFrom operation in the POST servlet in the org.apa...","CVE-2012-2138, CVE-2012-2138 vulnerability, CVE-2012-2138 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, apache security, org.apache.sling.servlets.post vulnerability, sling vulnerability","\u002Fwhat-is\u002Fcve-2012-2138",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-2138","Cybersecurity","CVE-2012-2138, CVE-2012-2138 vulnerability, CVE-2012-2138 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":15,"Negate":15,"Nodes":94},[95],{"Operator":96,"Negate":15,"CPEMatch":97},"OR",[98,101],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":99,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":100},"3D36B6C4-8CDD-4830-9FB6-C9194CEFA231","2.1.0",{"Vulnerable":15,"Criteria":40,"MatchCriteriaID":102,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7F5259B4-EB04-4093-9C5B-C52ED92F23E9",[],[105,112],{"id":106,"eventType":107,"eventTime":108,"details":109,"label":110,"color":111},"16835f59-5695-4527-9813-859097fd9fb5","HIGH_EPSS_DELTA","2025-12-27T04:06:18.973449+00:00","Daily EPSS score increased by 0.123 on 2023-12-30","EPSS Score Increased","red",{"id":113,"eventType":114,"eventTime":115,"details":116,"label":117,"color":118},"d07e6dd9-da2a-463e-a769-ff5974afc77b","LOW_EPSS_DELTA","2026-06-16T04:06:51.517644+00:00","Daily EPSS score decreased by 0.245 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":120,"version":21},1792358578149,{"score":122,"band":123,"action":124,"scoredAt":125},23,"Low","Monitor","2026-10-17T06:38:53.220367+00:00"]