UBUNTU-CVE-2015-1833

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-1833

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-1833.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-1833

Related

CVE-2015-1833

Published

2015-05-29T15:59:00Z

Modified

2015-05-29T15:59:00Z

Summary

[none]

Details

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.

References

Affected packages

Ubuntu:14.04:LTS / jackrabbit

Package

Name: jackrabbit
Purl: pkg:deb/ubuntu/jackrabbit?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.3.6-1+deb8u1build0.14.04.1

Affected versions

2.*

2.3.6-1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.3.6-1+deb8u1build0.14.04.1",
            "binary_name": "libjackrabbit-java"
        }
    ]
}