CVE-2023-22665: falha em Apache Jena
Apache Jena: Exposure of arbitrary execution in script engine expressions.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.3%
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.
Produtos afetados
Apache Software Foundation · Apache JenaCVEs relacionadas — Apache Jena
No mesmo produto, das mais perigosas para as menos.
CVE-2021-39239—XML External Entity (XXE) vulnerabilityEPSS 4.3%CVE-2022-28890—Processing external DTDsEPSS 2.7%CVE-2025-49656HIGHApache Jena: Administrative users can create files outside the server directory space via the admin UIEPSS 1.6%CVE-2023-32200HIGHApache Jena: Exposure of execution in script engine expressions.EPSS 1.5%CVE-2025-50151HIGHApache Jena: Configuration files uploaded by administrative users are not check properlyEPSS 1.1%