Lucene search
PRIOn knowledge basePRION:CVE-2015-1833HistoryMay 29, 2015 - 3:59 p.m.
Xxe
2015-05-2915:59:00
PRIOn knowledge base
www.prio-n.com
13
XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jackrabbit | eq | 2.2.13 | |
| jackrabbit | eq | 2.2.10 | |
| jackrabbit | eq | 2.4.3 | |
| jackrabbit | eq | 2.2.9 | |
| jackrabbit | le | 2.0.5 | |
| jackrabbit | eq | 2.6.5 | |
| jackrabbit | eq | 2.2.5 | |
| jackrabbit | eq | 2.2.8 | |
| jackrabbit | eq | 2.4.1 | |
| jackrabbit | eq | 2.8.0 |
References
mail-archives.apache.org/mod_mbox/jackrabbit-announce/201505.mbox/%3C555DA644.8080908%40greenbytes.de%3E
packetstormsecurity.com/files/132005/Jackrabbit-WebDAV-XXE-Injection.html
www.apache.org/dist/jackrabbit/2.10.1/RELEASE-NOTES.txt
www.debian.org/security/2015/dsa-3298
www.securityfocus.com/archive/1/535582/100/0/threaded
www.securityfocus.com/bid/74761
issues.apache.org/jira/browse/JCR-3883
www.exploit-db.com/exploits/37110/
Related
zdt
zdt
Apache Jackrabbit WebDAV XXE Exploit
2015-05-27 00:00:00
debian
debian
[SECURITY] [DSA 3298-1] jackrabbit security update
2015-06-30 22:38:40
mageia
mageia
Updated jackrabbit packages fix CVE-2015-1833
2015-06-09 00:17:51
nvd
nvd
CVE-2015-1833
2015-05-29 15:59:13
openvas
openvas
Debian Security Advisory DSA 3298-1 (jackrabbit - security update)
2015-07-01 00:00:00
Debian: Security Advisory (DSA-3298-1)
2015-06-30 00:00:00
Mageia: Security Advisory (MGASA-2015-0242)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2015-1833
2015-05-29 15:00:00
osv
osv
Improper Input Validation in Apache Jackrabbit
2022-05-14 02:49:30
securityvulns
securityvulns
Apache Jackrabbit XXE
2015-06-08 00:00:00
CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)
2015-06-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-1833
2015-05-29 00:00:00
exploitpack
exploitpack
Apache JackRabbit - WebDAV XML External Entity
2015-05-26 00:00:00
cve
cve
CVE-2015-1833
2015-05-29 15:59:13
debiancve
debiancve
CVE-2015-1833
2015-05-29 15:59:13
nessus
nessus
Debian DSA-3298-1 : jackrabbit - security update
2015-07-01 00:00:00
github
github
Improper Input Validation in Apache Jackrabbit
2022-05-14 02:49:30
exploitdb
exploitdb
Apache JackRabbit - WebDAV XML External Entity
2015-05-26 00:00:00
packetstorm
packetstorm
Milton Webdav 2.7.0.1 XXE Injection
2015-11-02 00:00:00