Skip to content
OpenAdvisories
Unscored DSA-3298-1 1 CVE

jackrabbit - security update

Published Jul 1, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 jackrabbit 2.3.6-1+deb7u1
Debian · 8 jackrabbit 2.3.6-1+deb8u1

Vulnerabilities 1

  • Medium —
    CVE-2015-1833 Public exploit EPSS 56%

    Improper Input Validation in Apache Jackrabbit

    XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet …

    jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-core Debian Ubuntu Maven