CVE-2023-22665 Information

Description

There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.

Reference

https://lists.apache.org/thread/s0dmpsxcwqs57l4qfs415klkgmhdxq7s