Package · Maven

org.apache.jackrabbit:jackrabbit-webapp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2023-37895

Apache Jackrabbit RMI access can lead to RCE

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to (including) 2.20.10 (stable branch) and 2.21.17 (unstable branch) use the component "commons-beanutils", which co…

Apache Software Foundation Apache Jackrabbit Standalone (jackrabbit-standalone and jackrabbit-standalone-components) Apache Jackrabbit Webapp (jackrabbit-webapp) jackrabbit Debian Ubuntu Maven

Jul 25, 2023