{"action":"Upgrade org.apache.jackrabbit:jackrabbit-webdav to 2.4.6 (2.4.x), 2.6.6 (2.6.x), 2.8.3 (2.8.x), 2.10.4 (2.10.x), 2.12.4 (2.12.x) or 2.13.3 (2.13.x) or later.","affected":[{"fixed":"2.4.6","introduced":"2.4.0"},{"fixed":"2.6.6","introduced":"2.6.0"},{"fixed":"2.8.3","introduced":"2.8.0"},{"fixed":"2.10.4","introduced":"2.10.0"},{"fixed":"2.12.4","introduced":"2.12.0"},{"fixed":"2.13.3","introduced":"2.13.0"}],"component":"org.apache.jackrabbit:jackrabbit-webdav","cve_ids":["CVE-2016-6801"],"ecosystem":"Maven","epss":0.02293,"exploited":false,"fixed_versions":["2.4.6","2.6.6","2.8.3","2.10.4","2.12.4","2.13.3"],"ghsa_id":"GHSA-9fc7-rhq3-wm7x","id":"tcs_01M5N8PVXRF67TMGWPMGVF5AS5","modified_at":"2024-02-16T08:06:20.906860Z","published_at":"2022-05-17T03:48:02Z","references":["https://osv.dev/vulnerability/GHSA-9fc7-rhq3-wm7x","https://nvd.nist.gov/vuln/detail/CVE-2016-6801","https://github.com/apache/jackrabbit/commit/16f2f02fcaef6202a2bf24c449d4fd10eb98f08d","https://github.com/apache/jackrabbit/commit/ea75d7c2aeaafecd9ab97736bf81c5616f703244","https://github.com/apache/jackrabbit/commit/eae001a54aae9c243ac06b5c8f711b2cb2038700","https://github.com/apache/jackrabbit","https://issues.apache.org/jira/browse/JCR-4009","https://web.archive.org/web/20210123170657/http://www.securityfocus.com/bid/92966","http://www.debian.org/security/2016/dsa-3679","http://www.openwall.com/lists/oss-security/2016/09/14/6"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9fc7-rhq3-wm7x","url":"https://osv.dev/vulnerability/GHSA-9fc7-rhq3-wm7x"}],"summary":"Apache Jackrabbit Authentication Hijacking Vulnerability"}