[<prev] [next>] [day] [month] [year] [list]
Message-ID: <27ef3844-0825-d242-803f-cdd000a57fe2@apache.org>
Date: Mon, 21 Jul 2025 07:23:02 +0000
From: Andy Seaborne <andy@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2025-50151: Apache Jena: Configuration files uploaded by
administrative users are not check properly
Severity: important
Affected versions:
- Apache Jena through <= 5.4.0
Description:
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
References:
https://jena.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-50151
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
