8.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.9%
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0.
lists.apache.org/thread/7hg0t2kws3fyr75dl7lll8389xzzc46z
www.cve.org/CVERecord?id=CVE-2023-22665