Description
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
Remediation
References
https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878
Related Vulnerabilities
CVE-2023-24977 Vulnerability in maven package org.apache.inlong:manager-pojo
CVE-2020-16044 Vulnerability in maven package org.webjars.npm:electron
CVE-2022-32531 Vulnerability in maven package org.apache.bookkeeper:bookkeeper-common
CVE-2022-46907 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2018-12023 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind