CVE-2025-50151
HIGHApache Jena <5.4.0 - Info Disclosure
Title source: llmDescription
File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
Scores
CVSS v3
8.8
EPSS
0.0030
EPSS Percentile
52.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-20
Status
published
Affected Products (2)
apache/jena
< 5.5.0
org.apache.jena/jena
< 5.5.0Maven
Timeline
Published
Jul 21, 2025
Tracked Since
Feb 18, 2026