CVE-2023-22665 — Apache Jena: Exposure of arbitrary execution in script engine expressions.
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript v…
Published: 2023-04-25 · CVSS: Unscored
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7