Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-22665
HistoryApr 25, 2023 - 7:15 a.m.

Design/Logic Flaw

2023-04-2507:15:00
PRIOn knowledge base
www.prio-n.com
4
apache jena
logic flaw
user query checking
remote execution
javascript
sparql query

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.

CPENameOperatorVersion
jenage3.7.0
jenale4.8.0

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%