Non notée
CVE-2021-39239 A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External…
Description
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Jena 4.1 | premières → < 4.1.0 | 4.1.0 |
Références
- lists.apache.org lists.apache.org
- [announce] 20210916 CVE-2021-39239: Apache Jena: XML External Entity (XXE) vulnerability lists.apache.org
- [jena-dev] 20210921 Re: CVE-2021-39239 notifications for Jena 4.2.0 lists.apache.org
- [jena-dev] 20210921 CVE-2021-39239 notifications for Jena 4.2.0 lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Jena
Les 6 CVE de Apache Jena →
CVE-2025-50151
File access paths in configuration files uploaded by users with administrator access are not validated
Non notée
CVE-2025-49656
Users with administrator access can create databases files outside the files area of the Fuseki server
Non notée
CVE-2023-32200
There is insufficient restrictions of called script functions in Apache Jena
versions 4.8.0 and earlier
Non notée
CVE-2023-22665
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts
Non notée