Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/01 5:17 p.m.•19 views

CVE-2026-73975

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

8.4CVSS0.003EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 4:41 p.m.•10 views

CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

8.4CVSS6AI score0.003EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/01 4:41 p.m.•15 views

CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

8.4CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/10/01 4:41 p.m.•11 views

EUVD-2026-90924

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

8.4CVSS6AI score0.003EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•14 views

CVE-2026-73975: Improper Neutralization of Special Elements in Data Query Logic

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

8.4CVSS6AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•11 views

PT-2026-103948

Name of the Vulnerable Software and Affected Versions djehuty versions prior to 26.3.2 Description An authenticated depositor can perform a SPARQL injection—a technique used to manipulate queries in a SPARQL endpoint—into a state-modifying DELETE/INSERT query. By providing a crafted session name,...

8.4CVSS5.9AI score0.003EPSS
SaveExploits0References7
Rows per page
Query Builder