VULNERABILITY INTELLIGENCE

CVE-2015-1833

CVSS score6.4 MEDIUM
EPSS probability55.95%
CISA KEVNot currently listed
Published2015-05-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references