CVE-2025-49656

Apache Jena versions up to 5.4.0 are vulnerable to a path traversal (CWE-22) flaw within the Fuseki server. Attackers with administrator privileges can exploit this by specifying arbitrary file paths or using dot-dot-slash (../) sequences when creating databases via the Fuseki Web UI. This allows...

CVE-2025-50151

Apache Jena versions up to and including 5.4.0 are vulnerable to improper input validation regarding file access paths in configuration files. An attacker with administrator privileges can upload configuration files with malicious paths, potentially leading to arbitrary file access , unintended s...