Описание
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
EPSS
Процентиль: 38%
0.00163
Низкий
8.8 High
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 8.8
ubuntu
24 дня назад
File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
CVSS3: 8.8
debian
24 дня назад
File access paths in configuration files uploaded by users with admini ...
CVSS3: 7.2
github
24 дня назад
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
EPSS
Процентиль: 38%
0.00163
Низкий
8.8 High
CVSS3
Дефекты
CWE-20