GitHub Advisoryadvisory · Maven

GHSA-phwj-86vx-cfjc Cross-site scripting in Apache Jena Fuseki

MEDIUM Published 2021-08-13 Modified 2021-07-09 Official page ↗
Aliases
CVE-2021-33192
Ecosystem
Maven
Packages
org.apache.jena:jena-fuseki
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-07-06

Affected packages

• Maven org.apache.jena:jena-fuseki: >= 2.0.0, < 4.1.0 → fixed in 4.1.0

Description

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

Related

Alias · CVE (1)

  • CVE-2021-33192 A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References