Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32200
HistoryJul 12, 2023 - 8:15 a.m.

Authorization

2023-07-1208:15:00
PRIOn knowledge base
www.prio-n.com
11
authorization
apache jena
vulnerability
remote execution
sparql
nvd

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

There is insufficient restrictions of called script functions in Apache Jena
versions 4.8.0 and earlier. It allows a
remote user to execute javascript via a SPARQL query.
This issue affects Apache Jena: from 3.7.0 through 4.8.0.

CPENameOperatorVersion
jenage3.7.0
jenale4.8.0

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%