Most recent entries from all

cnvd-2025-20872

EUVD-2026-259971

fkie_cve-2025-49656

Users with administrator access can create databases files outside the files area of the Fuseki server.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which fixes the issue.

GHSA-jq2c-m8gg-mqcm — Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server

Affected: Maven: org.apache.jena:jena-fuseki

Users with administrator access can create databases files outside the files area of the Fuseki server.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which fixes the issue.

jvndb-2025-000054

Jena Fuseki provided by The Apache Software Foundation contains the following vulnerability. <ul><li>Path traversal (CWE-22) - CVE-2025-49656</li></ul> Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to the developer and IPA. After the coordination between the reporter and the developer, JPCERT/CC coordinated with the developer to publish this advisory under Information Security Early Warning Partnership.

UBUNTU-CVE-2025-49656

Affected: Ubuntu:22.04:LTS: apache-jena, Ubuntu:24.04:LTS: apache-jena, Ubuntu:25.10: apache-jena, Ubuntu:26.10: apache-jena, Ubuntu:26.04:LTS: apache-jena

Users with administrator access can create databases files outside the files area of the Fuseki server. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which fixes the issue.