AI Score
Confidence
High
EPSS
Percentile
90.8%
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 only. Apache Jena 4.2.x and 4.3.x do not allow external entities.
gitbox.apache.org/repos/asf/jena.git
jena.apache.org/about_jena/security-advisories.html#cve-2022-28890---processing-external-dtds
lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
nvd.nist.gov/vuln/detail/CVE-2022-28890