7 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-32200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a...
Security Bulletin: IBM Integration Bus is vulnerable to a local attacker due to Apache Jena (CVE-2023-32200)
Summary First time Integration node startup, following version to version migration, is vulnerable to allowing a local attacker to execute arbitrary code due Apache Jena in IBM Integration Bus. CVE-2023-32200 Vulnerability Details CVEID: CVE-2023-32200 DESCRIPTION: Apache Jena could allow a remot...
CVE-2023-32200
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0...
CVE-2023-32200
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0...
CVE-2023-32200
CVE-2023-32200 : Apache Jena versions 3.7.0 through 4.8.0 are affected by insufficient restrictions of called script functions, enabling a remote attacker to execute JavaScript via a SPARQL query. The issue affects Jena up to 4.8.0. Root cause: improper/insufficient restrictions on script functio...
CVE-2023-32200 Apache Jena: Exposure of execution in script engine expressions.
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0...
CVE-2023-32200 Apache Jena: Exposure of execution in script engine expressions.
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0...