CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Apache, Java. It may be remotely exploitable.
CVE
CVE-2023-22665
Severity
MEDIUM
CVSS
5.4
EPSS
1.32%
Apache Java
Original NVD Description
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.
Related CVEs
Other vulnerabilities affecting the same vendor(s)