Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Jackrabbit Oak

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-1940

    Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak

    The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribut…

    Apache Software Foundation Apache Jackrabbit Oak org.apache.jackrabbit:oak-core Maven