PT-2025-30257 · Apache+1 · Fuseki+2

Noriaki Iwasaki · Publicado 2025-07-21 · Atualizado 2025-07-22 · CVE-2025-49656

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Jena versions prior to 5.5.0

Description Users with administrator access can create database files outside the designated files area of the Fuseki server.

Recommendations Upgrade to version 5.5.0.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-49656

GHSA-JQ2C-M8GG-MQCM

Produtos afetados

Apache Jena

Debian

Fuseki

Referências · 18

• https://github.com/apache/jena/commit/03c5265910aa3a27907bf54f6b4aaae3409afa4f · Nota
• https://github.com/apache/jena · Nota
• https://github.com/apache/jena/commit/35350569b4c1fd432d92e7c92af9597c4400debe · Nota
• https://twitter.com/oss_security/status/1947745449470841203 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2025-49656 · Aviso do Fabricante
• https://lists.apache.org/thread/qmm21som8zct813vx6dfd1phnfro6mwq · Aviso do Fabricante
• https://t.me/pentestingnews/64893 · Publicação no Telegram
• https://twitter.com/the_yellow_fall/status/1947476667087392876 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-49656 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-49656 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2025-49656 · Nota de Segurança
• https://twitter.com/CVEnew/status/1947232871296422306 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-jq2c-m8gg-mqcm · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-49656 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-49656 · Aviso do Fabricante