Skip to content

Product

org.apache.jackrabbit/jackrabbit-webdav vulnerabilities

1 published CVE affecting org.apache.jackrabbit/jackrabbit-webdav, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.jackrabbit/jackrabbit-webdav CVEs

Newest publication first

  1. CVE-2016-6801 Apache Jackrabbit Authentication Hijacking Vulnerability

    Published
    HighCVSS 8.8 EPSS 2.3%

    Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hij...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.