Package · Maven

org.apache.jena:jena

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2023-22665

Apache Jena: Exposure of arbitrary execution in script engine expressions.

There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.

Apache Software Foundation Apache Jena apache-jena apache-jena Debian Ubuntu Maven

Apr 25, 2023