Re: Re: Sling 12 issue

2023-04-12 Thread Eric Norman
Hi Rahul, The launcher script allows you to utilize the JAVA_OPTS environment variable to supply java remote debugging arguments to the jvm. For example, to set the env variable and run the launcher with a one-line subshell, you can execute something like this to open port 5000 for remote

CVE-2022-45064: Apache Sling Engine: Include-based XSS

2023-04-12 Thread Angela Schreiber
Description: The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resource with specific

RE: Re: Sling 12 issue

2023-04-12 Thread Rahul Rupani
On 2023/04/05 08:14:59 Robert Munteanu wrote: > Hi Rahul, > > On Wed, 2023-04-05 at 08:56 +0530, rahul rupani wrote: > > Hi, can anyone help me with turning on or creating a debug port for > > sling > > 12 as I'm having trouble doing it, Thanks. > > How are launching Sling? > > Thanks, > Robert >