GHSA-7rp6-w7mg-h8rwHigh

XML External Entity Reference in Apache Jena

Published
September 20, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-39239 →

📋 Description

A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.

🎯 Affected products1

  • maven/org.apache.jena:jena-core:< 4.2.0

🔗 References (6)