Apache Jackrabbit Standalone (jackrabbit-standalone and jackrabbit-standalone-components) vulnerabilities
1 known vulnerability in Apache Jackrabbit Standalone (jackrabbit-standalone and jackrabbit-standalone-components) from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Apache Jackrabbit Webapp (jackrabbit-webapp): Deserialization of Untrusted Data
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to (including) 2.20.10 (stable branch) and 2.21.17 (unstable branch) use the component "commons-beanutils", which con