CVE-2016-6801

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before…

published September 21, 2016

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02293 · 83.0th percentile
Published
2016-09-21T14:00Z
EPSS history
Timeline
  • 21 SEP 14:00Z
    Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before…
    cvelistv5