CVE-2025-50151

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-50151

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-50151

Aliases

Downstream

Published

2025-07-21T10:15:25Z

Modified

2025-07-29T16:48:47.520861Z

Summary

[none]

Details

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

4.5.0-2

4.9.0-1

{
    "urgency": "not yet assigned"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

4.9.0-1

{
    "urgency": "not yet assigned"
}