CVE-2023-32200

HIGH · CVSS 8.8 EPSS 1.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-32200

Severity

HIGH

CVSS

8.8

EPSS

1.47%

Apache Java

Original NVD Description

There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0.