Package · Debian

jackrabbit

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.3

CVE-2026-92414 Public exploit

Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issu…

Apache Software Foundation Apache Jackrabbit jackrabbit jackrabbit Debian Ubuntu

Oct 7, 2026
Critical 9.8

CVE-2023-37895

Apache Jackrabbit RMI access can lead to RCE

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to (including) 2.20.10 (stable branch) and 2.21.17 (unstable branch) use the component "commons-beanutils", which co…

Apache Software Foundation Apache Jackrabbit Webapp (jackrabbit-webapp) Apache Jackrabbit Standalone (jackrabbit-standalone and jackrabbit-standalone-components) jackrabbit Debian Ubuntu Maven

Jul 25, 2023