Skip to content
OpenAdvisories

Package · Debian

jackrabbit

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-92414 Public exploit

    Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

    : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issu…

    Apache Software Foundation Apache Jackrabbit jackrabbit jackrabbit Debian Ubuntu