| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.jena:jena | ≥ 3.7.0, < 4.9.0 | 4.9.0 |
| jena | ≥ 3.7.0, ≤ 4.8.0 |
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena from 3.7.0 through 4.8.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free