Package · Debian

apache-jena

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.4

CVE-2023-22665

Apache Jena: Exposure of arbitrary execution in script engine expressions.

There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.

Apache Software Foundation Apache Jena apache-jena apache-jena Debian Ubuntu Maven

Apr 25, 2023
Medium 6.1

CVE-2021-33192

Display information UI XSS

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

Apache Software Foundation Apache Jena Fuseki apache-jena apache-jena Debian Ubuntu Maven

Jul 5, 2021