Description
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
Remediation
References
https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
Related Vulnerabilities
CVE-2021-46877 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-5410 Vulnerability in maven package org.springframework.cloud:spring-cloud-config-server
CVE-2020-8203 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2023-26118 Vulnerability in npm package angular
CVE-2019-10362 Vulnerability in maven package io.jenkins:configuration-as-code