Lucene search
China National Vulnerability DatabaseCNVD-2023-70282HistoryJul 14, 2023 - 12:00 a.m.
Apache Jena Code Execution Vulnerability
2023-07-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
apache jena
code execution
vulnerability
semantic web
linked data
sparql query
0.002 Low
EPSS
Percentile
59.9%
Apache Jena is the United States Apache (Apache) Foundation of a Java Semantic Web framework. Used to build semantic Web and linked data applications. Apache Jena suffers from a code execution vulnerability that stems from insufficient restrictions on called script functions. An attacker can exploit the vulnerability to execute javascript via a SPARQL query.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jena >=3.7.0， | le | 4.8.0 |
Related
cve
cve
CVE-2023-32200
2023-07-12 08:15:10
ubuntucve
ubuntucve
CVE-2023-32200
2023-07-12 00:00:00
debiancve
debiancve
CVE-2023-32200
2023-07-12 08:15:10
prion
prion
Authorization
2023-07-12 08:15:00
veracode
veracode
Remote Code Execution (RCE)
2023-07-26 10:23:10
ibm
ibm
github
github
Apache Jena Expression Language Injection vulnerability
2023-07-12 09:30:53
cvelist
cvelist
nvd
nvd
CVE-2023-32200
2023-07-12 08:15:10
osv
osv
Apache Jena Expression Language Injection vulnerability
2023-07-12 09:30:53