CVE-2025-50151
published 2025-07-21CVE-2025-50151: File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0…
PriorityP261high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.94%
56.7th percentile
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | jena | < 5.5.0 | 5.5.0 |
| apache_software_foundation | apache_jena | <= 5.4.0 | — |
| debian | apache-jena | — | — |
| msrc | azl3_kernel_6.6.57.1-7_on_azure_linux_3.0 | — | — |
| msrc | azl3_kernel_6.6.64.2-1_on_azure_linux_3.0 | — | — |
| msrc | cbl2_kernel_5.15.167.1-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_kernel_5.15.173.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerable versions of Apache Jena are up to and including 5.4.0; flag deployments running these versions where administrator-level configuration upload is possible ↗
- →The vulnerability is exploited via uploading configuration files with unvalidated file access paths; monitor for unexpected or arbitrary configuration file uploads by administrator-privileged accounts in Apache Jena ↗
- ·Exploitation requires administrator-level access; this is not an unauthenticated attack vector ↗
- ·Fix is available in Apache Jena 5.5.0, which removes the ability to perform arbitrary configuration upload entirely ↗
- ·Multiple Red Hat products (AMQ Clients, Apicurio Registry 3, Data Grid 8, JBoss EAP 7/8/Expansion Pack, Streams for Apache Kafka 2) carry affected Jena packages with fixes currently deferred ↗
- ·Debian distributions (bookworm, forky, sid, trixie) remain open/unpatched as of advisory publication ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_redhat8.8HIGH
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2025-50151: File access paths in configuration files uploaded by users with administrator access are not validated
osv·2025-07-21·CVSS 8.8
CVE-2025-50151 [HIGH] CVE-2025-50151: File access paths in configuration files uploaded by users with administrator access are not validated
File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
GHSA
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
ghsa·2025-07-21
CVE-2025-50151 [HIGH] CWE-20 Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
OSV
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
osv·2025-07-21
CVE-2025-50151 [HIGH] Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
Red Hat
org.apache.jena: Apache Jena insufficent file validation
vendor_redhat·2025-07-21·CVSS 8.8
CVE-2025-50151 [HIGH] CWE-20 org.apache.jena: Apache Jena insufficent file validation
org.apache.jena: Apache Jena insufficent file validation
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
A file path validation flaw has been discovered in Apache Jena. This flaw allows users with administrative access to upload arbitrary configurations.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Package: jena-arq (Red Hat AMQ Clients) - Fix deferred
Package: jena-base (Red Hat
Debian
CVE-2025-50151: apache-jena - File access paths in configuration files uploaded by users with administrator ac...
vendor_debian·2025·CVSS 8.8
CVE-2025-50151 [HIGH] CVE-2025-50151: apache-jena - File access paths in configuration files uploaded by users with administrator ac...
File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
Scope: local
bookworm: open
forky: open
sid: open
trixie: open
Microsoft
smb: client: fix OOBs when building SMB2_IOCTL request
vendor_msrc·2024-11-12·CVSS 7.8
CVE-2024-50151 [HIGH] CWE-787 smb: client: fix OOBs when building SMB2_IOCTL request
smb: client: fix OOBs when building SMB2_IOCTL request
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.
No detection rules found.
No public exploits indexed.
2025-07-21
Published