AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-2138

MEDIUM · CVSS 5 EPSS 14.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2012-2138
Severity
MEDIUM
CVSS
5
EPSS
14.12%
Apache

Original NVD Description

The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.