Back to search
CVE-2022-28890
Published: May 5, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
| Vendor | Product | Versions |
|---|---|---|
Apache Software Foundation | Apache Jena | affected Apache Jena - <= 4.4.0 |
References
https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now