CVE-2016-6801

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6801
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6801.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6801
Aliases
Downstream
Published
2016-09-21T14:25:21.737Z
Modified
2026-01-10T03:59:48.324655Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.

References

Affected packages

Git / github.com/apache/jackrabbit

Affected ranges

Type
GIT
Repo
https://github.com/apache/jackrabbit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00e3dc1470e63b73f79b01ff6d2e6c36d3836039
Last affected
1bcd41f9bc12ef4a973f9bd73f571fb507b7596e
Last affected
260d6cbb02bf39a5f1f09742f87f52e2c29cddec
Last affected
2a9b636280a14dda1a9e02b967f7cc4847327e09
Last affected
31247c0e8117aa4551805679dcf9a5d6b7a71973
Last affected
4294bc407827560833b929f0a88a6e73198fc47b
Last affected
46a7abdec98ce898b865d8a2c80a5f52225e7af3
Last affected
47e1702c790780bf7cf8fba315bb98a82d31ede4
Last affected
6528eb068e1682597370ae8902043ef2c2897511
Last affected
655ea8a52c0c75b502d66b68c83c2751aa29b88e
Last affected
684d36a524044a9d4d6d5951feee90ba226b382c
Last affected
6b9345949af0c5acf4db724a8ea3a79e34dd97f9
Last affected
759d3a4b79be0ede3b2e7cd463fc1a0d92682e37
Last affected
8b154dbb1aa5e9c4f3fc7b875009e96b77b0463e
Last affected
98ed8608c86adb653c6dc87d0a5f327e648fc65e
Last affected
99581e9a9bb4bafd8c8a64a7840be1929c343009
Last affected
a694ab00d43a4bfa5635f6f648ecdf497651cd8c
Last affected
ab172f270f3293453875f46f18b008e4486f8958
Last affected
afebb0e771ec1e8a60027364228bd7def76b9f2b
Last affected
b86c07f4f0304e2e4eac42f0bbf68bcd5681e89d
Last affected
c08a005b4d37dcaa8b8634f30b79fb0874f24e20
Last affected
c3ae334562a18ddb271b5801217861b268e98cbe
Last affected
db4aa466b13165ebe1d97d0bdcaea7c0e57dbc97
Last affected
e22d6860197868c62733a54c36803bacaad26f77
Last affected
e840cbe7f5e2f78e6a05f3a865ea2ff0945117d3
Last affected
fcd0110d408a9df811b5f1d2d1323c2f144b9851

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6801.json"