Threats tagged 'ghsa-xg9p-p463-3qjp'

Apache Jena versions up to 5.4.0 contain a vulnerability where file access paths in configuration files uploaded by users with administrator privileges are not validated. This flaw allows potentially harmful file access through crafted configuration uploads. The issue is resolved in version 5.5.0, which disallows arbitrary configuration uploads.