debian · CVE-2021-39239

Quick triage

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2021-39239 not yet assigned priority: Debian including 1 source packages (apache-jena), 4 status rows across 4 suites (bookworm, forky, sid, trixie): resolved 4.

Description:

A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.