Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-1833
HistoryMay 29, 2015 - 3:59 p.m.

CVE-2015-1833

2015-05-2915:59:00
Debian Security Bug Tracker
security-tracker.debian.org
9

0.019 Low

EPSS

Percentile

88.4%

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.