High DLA-629-1 1 CVE

jackrabbit - security update

Published Sep 18, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	jackrabbit	2.3.6-1+deb7u2

Vulnerabilities 1

High 8.8

CVE-2016-6801

Apache Jackrabbit Authentication Hijacking Vulnerability

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows re…

jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-webdav Debian Ubuntu Maven

Sep 21, 2016