Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
BID:74761
Info
Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
| Bugtraq ID: | 74761 |
| Class: | Design Error |
| CVE: |
CVE-2015-1833 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2015 12:00AM |
| Updated: | Jul 15 2015 12:16AM |
| Credit: | Julian Reschke |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
Apache Jackrabbit is prone to an XML External Entity vulnerability.
An attacker can exploit this issue to gain access to sensitive information from the application; this may lead to further attacks.
Versions prior to Apache Jackrabbit 2.10.1 are vulnerable.
Apache Jackrabbit is prone to an XML External Entity vulnerability.
An attacker can exploit this issue to gain access to sensitive information from the application; this may lead to further attacks.
Versions prior to Apache Jackrabbit 2.10.1 are vulnerable.
Exploit / POC
Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
The following exploit code is available:
An attacker can exploit this issue using readily available tools.
The following exploit code is available:
Solution / Fix
Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apache Jackrabbit CVE-2015-1833 XML External Entity Information Disclosure Vulnerability
References:
References: