Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-70282
HistoryJul 14, 2023 - 12:00 a.m.

Apache Jena Code Execution Vulnerability

2023-07-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
apache jena
code execution
vulnerability
semantic web
linked data
sparql query

EPSS

0.003

Percentile

68.6%

Apache Jena is the United States Apache (Apache) Foundation of a Java Semantic Web framework. Used to build semantic Web and linked data applications. Apache Jena suffers from a code execution vulnerability that stems from insufficient restrictions on called script functions. An attacker can exploit the vulnerability to execute javascript via a SPARQL query.

EPSS

0.003

Percentile

68.6%