CVE-2021-33192

Description

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
3.378

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-33192 are fixed in Apache-jena-fuseki 4.1.0Windows
Vulnerabilities CVE-2021-33192 are fixed in Apache-jena-fuseki for Linux 4.1.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234