CVE-2025-50151

Published: Jul 21, 2025Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

Affected (1)

Products: Apache: Jena

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Jena	Before 5.5.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://lists.apache.org/thread/12gks5z40gh9bszn1xk8mz34gz586xss

Source: security@apache.org

Issue TrackingVendor Advisory

http://www.openwall.com/lists/oss-security/2025/07/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.