XML External Entity (XXE)

jena-core is vulnerable to XML external entity attacks. The RDFXMLParser function of RDFXMLParser.java does not properly disable the access to external entities, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...

com.github.galigator.openllet:openllet-cli (2.6.5), com.github.galigator.openllet:openllet-examples (2.6.5) +100 more potentially affected by CVE-2021-39239 via org.apache.jena:jena-core (3.10.0)

org.apache.jena:jena-core MAVEN version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jena:jena-core and may be impacted: - com.github.galigator.openllet:openllet-cli 2.6.5 - com.github.galigator.openllet:openllet-examples 2.6.5 -...

org.apache.jena:apache-jena (2.7.0-incubating), org.apache.jena:jena-arq (2.9.0-incubating) +7 more potentially affected by CVE-2021-39239 via org.apache.jena:jena-core (2.7.0-incubating)

org.apache.jena:jena-core MAVEN version 2.7.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jena:jena-core and may be impacted: - org.apache.jena:apache-jena 2.7.0-incubating - org.apache.jena:jena-arq 2.9.0-incubating -...

org.apache.jena:apache-jena (2.7.2), org.apache.jena:jena-arq (2.9.2) +2 more potentially affected by CVE-2021-39239 via org.apache.jena:jena-core (2.7.2)

org.apache.jena:jena-core MAVEN version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jena:jena-core and may be impacted: - org.apache.jena:apache-jena 2.7.2 - org.apache.jena:jena-arq 2.9.2 - org.apache.jena:jena-fuseki 0.2.3 -...

XML External Entity (XXE)

jena-core is vulnerable to XML external entity. An attacker is able to execute XML External Entities XXE due to lack of secure XML processing, subsequently exposing the contents of local files to a remote server...