Description
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
Remediation
References
https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
Related Vulnerabilities
CVE-2020-15138 Vulnerability in npm package prismjs
CVE-2020-11022 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2023-31133 Vulnerability in npm package ghost
CVE-2023-30548 Vulnerability in npm package gatsby-plugin-sharp
CVE-2018-19360 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind