Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-50151 · ADVISORY
• apache/jena · PACKAGE
• lists.apache.org/thread/12gks5z40gh9bszn1xk8mz34gz586xss · WEB
• openwall.com/lists/oss-security/2025/07/21/2 · WEB

Lỗ hổng khác của org.apache.jena:jena

• CVE-2023-32200CAO 8.8There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execut…
• CVE-2023-22665TRUNG BÌNH 5.4There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote u…
• CVE-2022-28890NGHIÊM TRỌNG 9.8A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache …