CVE-2025-50151CWE-20

Apache Jena: Configuration files uploaded by administrative users are not check properly

High · published July 21, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01067 · 64.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-07-21T09:32Z
EPSS history
Timeline
  • 21 JUL 09:32Z
    Apache Jena: Configuration files uploaded by administrative users are not check properly
    cvelistv5