CVE-2025-58782

CVSS v3.1

6.5

Medium

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Jackrabbit (affected versions not specified)

Description A vulnerability in Apache Jackrabbit exposes systems to JNDI injection, potentially leading to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

CVE-2025-58782

GHSA-CXVC-G8F2-4GMM

Apache Jackrabbit

Debian