CVE-2025-50151

Apache Jena versions up to and including 5.4.0 are vulnerable to improper input validation regarding file access paths in configuration files. An attacker with administrator privileges can upload configuration files with malicious paths, potentially leading to arbitrary file access , unintended s...

CVE-2025-50151 Apache Jena: Configuration files uploaded by administrative users are not check properly

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload...