VDB
CVE-2021-33192
CVE-2021-33192
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).
EPSS 2.88% · 85.9th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
2.88%
85.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:24.04:LTS | apache-jena | 0, 4.5.0-2, 4.9.0-1 |
| Ubuntu:22.04:LTS | apache-jena | 3.17.0-1, 3.17.0-2, 3.17.0-3 |
| Ubuntu:25.10 | apache-jena | 4.9.0-1, 0 |
Timeline
- Apr 13, 2021 CVE Published
- Jul 6, 2021 EPSS Score
- Jul 9, 2021 EPSS Score
- Nov 3, 2021 EPSS Score
- Jan 2, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 1, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 29, 2022 EPSS Score
- Feb 27, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-33192 third-party-advisory
- https://lists.apache.org/thread/sq6q94q0prqwr9vdm2wptglcq1kv98k8 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-33192 third-party-advisory