CVE-2025-50151highCWE-20

CVE-2025-50151: fallo de gravedad alta en Apache Jena

Apache Jena: Configuration files uploaded by administrative users are not check properly

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Apache Jena+ Monitorear apache-jena

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 1.1%
File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Apache Software Foundation · Apache Jena
CVEs relacionadas — Apache Jena

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-39239—XML External Entity (XXE) vulnerabilityEPSS 4.3%CVE-2022-28890—Processing external DTDsEPSS 2.7%CVE-2025-49656HIGHApache Jena: Administrative users can create files outside the server directory space via the admin UIEPSS 1.6%CVE-2023-32200HIGHApache Jena: Exposure of execution in script engine expressions.EPSS 1.5%CVE-2023-22665—Apache Jena: Exposure of arbitrary execution in script engine expressions.EPSS 1.3%