Directory Traversal

Overview org.apache.jena:jena-fuseki is a Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols. Affected versions of this package are vulnerable to Directory Traversal via the SPARQL Update. An attacker can access files outside of the...

Directory Traversal

Overview org.apache.jena:jena-arq is a SPARQL 1.1 query engine for Apache Jena. Affected versions of this package are vulnerable to Directory Traversal via the SPARQL Update. An attacker can access files outside of the intended directory by crafting malicious web requests. Details A Directory...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the SPARQL Update. An attacker can access files outside of the intended directory by crafting malicious web requests. Details A Directory Traversal attack also known as path traversal aims to access files and...

CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

CVE-2026-61372

Apache Jena Fuseki is vulnerable to a Path Traversal (Directory Traversal) vulnerability in versions through 6.1.0 . An attacker can exploit the SPARQL Update functionality by crafting malicious web requests using "dot-dot-slash" (../) sequences or absolute file paths. This allows unauthorized ac...