Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg9p-p463-3qjp

Опубликовано: 21 июл. 2025
Источник: github
Github: Прошло ревью
CVSS3: 7.2

Описание

Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

Пакеты

Наименование

org.apache.jena:jena

maven
Затронутые версииВерсия исправления

< 5.5.0

5.5.0

EPSS

Процентиль: 51%
0.00284
Низкий

7.2 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
5 месяцев назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 6.5
redhat
5 месяцев назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 8.8
nvd
5 месяцев назад

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVSS3: 8.8
debian
5 месяцев назад

File access paths in configuration files uploaded by users with admini ...

EPSS

Процентиль: 51%
0.00284
Низкий

7.2 High

CVSS3

Дефекты

CWE-20