oss-sec mailing list archives

CVE-2021-33192: Apache Jena Fuseki: Display information UI XSS

From: Andy Seaborne <andy () apache org>
Date: Sun, 04 Jul 2021 12:50:26 +0000

Severity: Medium

Description:

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain 
page views.  This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

Mitigation:

Users are advised to upgrade to Apache Jena 4.1.0 or later.

Credit:

Apache Jena would like to thank Luka Safonov for reporting this issue.

Current thread:

CVE-2021-33192: Apache Jena Fuseki: Display information UI XSS Andy Seaborne (Jul 04)