Description
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
Remediation
References
https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
Related Vulnerabilities
CVE-2023-31062 Vulnerability in maven package org.apache.inlong:manager-web
CVE-2022-45787 Vulnerability in maven package org.apache.james:apache-mime4j-storage
CVE-2019-1003093 Vulnerability in maven package org.jenkins-ci.plugins:nomad
CVE-2019-8331 Vulnerability in maven package org.webjars:bootstrap
CVE-2019-1003060 Vulnerability in maven package org.jenkins-ci.plugins:zap