Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg9p-p463-3qjp

Опубликовано: 21 июл. 2025
Источник: github
Github: Прошло ревью
CVSS3: 7.2

Описание

Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

Пакеты

Наименование

org.apache.jena:jena

maven
Затронутые версииВерсия исправления

< 5.5.0

5.5.0

EPSS

Процентиль: 38%
0.00163
Низкий

7.2 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
24 дня назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 6.5
redhat
24 дня назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 8.8
nvd
24 дня назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 8.8
debian
24 дня назад

File access paths in configuration files uploaded by users with admini ...

EPSS

Процентиль: 38%
0.00163
Низкий

7.2 High

CVSS3

Дефекты

CWE-20