GitHub Advisoryadvisory · Maven

GHSA-xg9p-p463-3qjp Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access

HIGH Published 2025-07-21 Modified 2025-11-05 Official page ↗
Aliases
CVE-2025-50151
Ecosystem
Maven
Packages
org.apache.jena:jena
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2025-07-21

Affected packages

• Maven org.apache.jena:jena: < 5.5.0 → fixed in 5.5.0

Description

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

Related

Alias · CVE (1)

  • CVE-2025-50151 File access paths in configuration files uploaded by users with administrator access are not validated. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References