Apache Software Foundation Apache Jackrabbit vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_jackrabbit.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-53689HIGHCVSS 8.8≥ 2.20.0, < 2.20.17≥ 2.22.0, < 2.22.1+1 more2025-07-14

CVE-2025-53689 [HIGH] CWE-611 CVE-2025-53689: Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23. Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not support