Apache Jena Expression Language Injection vulnerability

🗓️ 12 Jul 2023 09:30:53Reported by GitHub Advisory DatabaseType

Apache Jena Expression Language Injection vulnerability. Insufficient restrictions of called script functions allows remote execution of javascript via SPARQL quer

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to a local attacker due to Apache Jena (CVE-2023-32200)	28 Nov 202308:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10	29 Jul 202522:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Jena-arq library affects IBM Engineering Lifecycle Optimization - Publishing	4 Oct 202308:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665).	3 Jul 202318:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	19 Apr 202407:11	–	ibm
CNNVD	Apache Jena 安全漏洞	25 Apr 202300:00	–	cnnvd
CNNVD	Apache Jena 安全漏洞	12 Jul 202300:00	–	cnnvd
CNVD	Apache Jena Code Execution Vulnerability	14 Jul 202300:00	–	cnvd
CNVD	Apache Jena Cross-Site Scripting Vulnerability	28 Apr 202300:00	–	cnvd
CVE	CVE-2023-22665	25 Apr 202306:44	–	cve

Vulners

Node

org.apache.jena jenaRange3.7.0–4.9.0maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32200
lists	www.lists.apache.org/thread/7hg0t2kws3fyr75dl7lll8389xzzc46z
cve	www.cve.org/CVERecord
jena	www.jena.apache.org/about_jena/security-advisories.html
github	www.github.com/advisories/GHSA-j927-w6g7-7c7w