| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.jena:jena-core | < 4.2.0 | 4.2.0 |
| jena | ≤ 4.1.0 |
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free