rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.getBindingNames

Detailed Report: https://oss-fuzz.com/testcase?key=4665786794311680 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.eclipse.rdf4j.query.algebra.Join.getBindingNames...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.BrackettedExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5966938285604864 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.getBindingNames

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=6398229892628480 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.PropertyListPath

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=4510884810326016 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.visit

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=5046526902403072 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.TriplesNodePath

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=4686402347204608 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

GHSA-X3CR-X949-H5JV RDF4J vulnerable to zip slip

RDF4J prior to 2.5.0 allows Directory Traversal via ../ in an entry in a ZIP archive...

RDF4J vulnerable to zip slip

RDF4J prior to 2.5.0 allows Directory Traversal via ../ in an entry in a ZIP archive...

Directory Traversal

rdf4j-util is vulnerable to directory traversal. An attacker is able to overwrite arbitrary files using the characters ../ as an entry in a ZIP archive. The overwrite occurs during decompressing of the ZIP file...

CVE-2018-20227

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

CVE-2018-20227

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

Directory traversal

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

CVE-2018-20227

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

CVE-2018-20227

Summary of CVE-2018-20227 (RDF4J): RDF4J 2.4.2 is vulnerable to a directory traversal (zip slip) via a ../ path in an entry within a ZIP archive. The underlying issue is a path traversal flaw that could enable extraction of arbitrary files when decompressing ZIP entries. Affected version in publi...

CVE-2018-20227

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

CVE-2018-20227: Improper Limitation of a Pathname to a Restricted Directory

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...

PT-2018-15295 · Eclipse · Rdf4J

Name of the Vulnerable Software and Affected Versions: RDF4J versions 2.4.2 through 2.4.2 RDF4J versions prior to 2.5.0 Description: The issue allows Directory Traversal via ../ in an entry in a ZIP archive. Recommendations: For RDF4J version 2.4.2, update to version 2.5.0 or later. For RDF4J...

Eclipse RDF4j vulnerable to XML External Entity

Eclipse RDF4j version 2.4.0 Milestone 2 contains a XML External Entity XXE vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially...

GHSA-6XQ8-PVG4-3MF3 Eclipse RDF4j vulnerable to XML External Entity

Eclipse RDF4j version 2.4.0 Milestone 2 contains a XML External Entity XXE vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially...

XML External Entity (XXE)

rdf4j-rio-trix is vulnerable to XML external entities XXE attacks. The library does not disable entities and document type declarations, allowing a malicious user to conduct an XXE injection attack...