CVE-2021-39239
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-39239
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-39239.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-39239
- Aliases
- Related
- Published
- 2021-09-16T15:15:07Z
- Modified
- 2024-09-11T02:00:07Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
- References
-
- https://lists.apache.org/thread.html/rf44d529c54ef1d0097e813f576a0823a727e1669a9f610d3221d493d%40%3Cusers.jena.apache.org%3E
- https://lists.apache.org/thread.html/r0f03ae7e102c3e8587fdd36531fc167309335738156dfbd7d9c1bf45%40%3Cdev.jena.apache.org%3E
- https://lists.apache.org/thread.html/rce5241b228a1f0e5880f6b2bfdb7ae9ee420e94cb692738a0bbfed9d%40%3Cdev.jena.apache.org%3E
- https://lists.apache.org/thread.html/rf44d529c54ef1d0097e813f576a0823a727e1669a9f610d3221d493d%40%3Cannounce.apache.org%3E
- https://security-tracker.debian.org/tracker/CVE-2021-39239
Affected packages
Debian:12 / apache-jena
Package
- Name
- apache-jena
- Purl
- pkg:deb/debian/apache-jena?arch=source
Debian:13 / apache-jena
Package
- Name
- apache-jena
- Purl
- pkg:deb/debian/apache-jena?arch=source