GitHub Advisoryadvisory · Maven

GHSA-7rp6-w7mg-h8rw XML External Entity Reference in Apache Jena

HIGH Published 2021-09-20 Modified 2021-09-17 Official page ↗
Aliases
CVE-2021-39239
Ecosystem
Maven
Packages
org.apache.jena:jena-core
Severity
High
Weaknesses
CWE-611
Reviewed
2021-09-17

Affected packages

• Maven org.apache.jena:jena-core: < 4.2.0 → fixed in 4.2.0

Description

A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.

Related

Alias · CVE (1)

  • CVE-2021-39239 A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE),… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References