Not rated
CVE-2021-39239 A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External…
Description
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Jena 4.1 | earliest → < 4.1.0 | 4.1.0 |
References
- lists.apache.org lists.apache.org
- [announce] 20210916 CVE-2021-39239: Apache Jena: XML External Entity (XXE) vulnerability lists.apache.org
- [jena-dev] 20210921 Re: CVE-2021-39239 notifications for Jena 4.2.0 lists.apache.org
- [jena-dev] 20210921 CVE-2021-39239 notifications for Jena 4.2.0 lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Jena
The 6 CVEs of Apache Jena →
CVE-2025-50151
File access paths in configuration files uploaded by users with administrator access are not validated
Not rated
CVE-2025-49656
Users with administrator access can create databases files outside the files area of the Fuseki server
Not rated
CVE-2023-32200
There is insufficient restrictions of called script functions in Apache Jena
versions 4.8.0 and earlier
Not rated
CVE-2023-22665
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts
Not rated