| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.jena:jena | < 4.8.0 | 4.8.0 |
| jena | ≥ 3.7.0, ≤ 4.8.0 |
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free