Apache Jena XML External Entity Injection Vulnerability

Apache Jena is a Java Semantic Web framework from the U.S. Apache (Apache) Foundation . Apache Jena in versions prior to 4.1.0 has an XML external entity injection vulnerability, which stems from a web system or product that does not set the correct filtering to allow references to external entities, and a remote attacker could exploit the vulnerability by sending a specially crafted XML file to read the file.