https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:58:28 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-07947 cnvd-2016-07947 https://cve.radiocsirt.org/vuln/cnvd-2016-07947 https://cve.radiocsirt.org/vuln/euvd-2026-86169 EUVD-2026-86169 https://cve.radiocsirt.org/vuln/euvd-2026-86169 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6801 <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-6801 https://cve.radiocsirt.org/vuln/ghsa-9fc7-rhq3-wm7x <p><strong>Affected:</strong> Maven: org.apache.jackrabbit:jackrabbit-webdav</p> <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> <p><strong>Affected:</strong> Maven: org.apache.jackrabbit:jackrabbit-webdav</p> <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> https://cve.radiocsirt.org/vuln/ghsa-9fc7-rhq3-wm7x https://cve.radiocsirt.org/vuln/gsd-2016-6801 gsd-2016-6801 https://cve.radiocsirt.org/vuln/gsd-2016-6801 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6801 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit</p> <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit</p> <p>Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6801