CVE-2012-2138

source: wwwsecurityfocuscom/bid/54341/info Apache Sling is prone to a denial-of-service vulnerability An attacker can exploit this issue to exhaust available memory, resulting in a denial-of-service condition Apache Sling 210 and prior are vulnerable curl -u admin:pwd -d "" "examplecom/content/foo/?/%40CopyFrom=/" ...

The CopyFrom operation of the Sling POST servlet allows for copying a parent node to one of its descendant nodes, creating an infinite loop that ultimately results in denial of service, once memory and/or storage resources are exhausted ...