Apache Sling versions 1.1.2 and below suffer from an open redirect vulnerability…. Apache Sling versions 1.1.2 and below suffer from an open redirect vulnerability.

Read more http://packetstormsecurity.com/files/123701/CVE-2013-4390.txt