Jena Fuseki
Monthly
Path traversal in Apache Jena Fuseki (all versions through 6.1.0) allows unauthenticated remote attackers to read arbitrary files outside the application's intended directory via crafted HTTP requests. The CVSS 3.1 score of 7.5 with High Confidentiality impact and no authentication required (PR:N, AC:L) underscores a low-barrier information disclosure risk against any network-accessible Fuseki instance. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions make this a meaningful priority for organizations exposing Fuseki to untrusted networks.
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views.0.0 to version 4.0.0 (inclusive). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Path traversal in Apache Jena Fuseki (all versions through 6.1.0) allows unauthenticated remote attackers to read arbitrary files outside the application's intended directory via crafted HTTP requests. The CVSS 3.1 score of 7.5 with High Confidentiality impact and no authentication required (PR:N, AC:L) underscores a low-barrier information disclosure risk against any network-accessible Fuseki instance. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions make this a meaningful priority for organizations exposing Fuseki to untrusted networks.
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views.0.0 to version 4.0.0 (inclusive). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.