CVE ID:	CVE-2015-1833
Description:	XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2015.0242   1.3.6.1.4.1.25623.1.0.703298
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1833 BugTraq ID: 74761 http://www.securityfocus.com/bid/74761 Bugtraq: 20150521 CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability) (Google Search) http://www.securityfocus.com/archive/1/535582/100/0/threaded Debian Security Information: DSA-3298 (Google Search) http://www.debian.org/security/2015/dsa-3298 https://www.exploit-db.com/exploits/37110/ http://packetstormsecurity.com/files/132005/Jackrabbit-WebDAV-XXE-Injection.html http://mail-archives.apache.org/mod_mbox/jackrabbit-announce/201505.mbox/%3C555DA644.8080908%40greenbytes.de%3E