← Database

CVE-2021-39239

HIGH CVSS: 7.5 Published: 2021-09-16 Modified: 2026-06-17

Description

A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.

Affected Platforms

Apache Jena

Weakness Type

CWE-611

References