What is GHSA-phwj-86vx-cfjc?

GHSA-phwj-86vx-cfjc is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting in Apache Jena Fuseki

Which CVE IDs does GHSA-phwj-86vx-cfjc cover?

GHSA-phwj-86vx-cfjc covers the following CVE IDs: CVE-2021-33192. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-phwj-86vx-cfjc?

GHSA-phwj-86vx-cfjc has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-phwj-86vx-cfjc?

GHSA-phwj-86vx-cfjc affects 1 product, including: maven/org.apache.jena:jena-fuseki:\u003e= 2.0.0, \u003c= 4.0.0.

GHSA-phwj-86vx-cfjcMediumCVSS 6.1

Cross-site scripting in Apache Jena Fuseki

Vendor

GitHub Security Advisories

Published

August 13, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-33192 →

📋 Description

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

🎯 Affected products1

maven/org.apache.jena:jena-fuseki:>= 2.0.0, <= 4.0.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-33192
https://lists.apache.org/thread.html/r684d8943d755a96fe90f8cd8df196737b6bde3f2b74e15a9bd479975%40%3Cusers.jena.apache.org%3E
https://github.com/advisories/GHSA-phwj-86vx-cfjc