title: XML External Entity (XXE) vulnerability
description: A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
problem types: XML External Entity (XXE) vulnerability
affected:
{
product: Apache Jena
vendor: Apache Software Foundation
versions:
lessThan: 4.1.0, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'other': 'high'}
type: unknown
]
workarounds: Users are advised to upgrade to Apache Jena 4.2.0 or later.