eclipse-rdf4j/rdf4j

Releases164

Frequency3 weeks 1 day

Last Release 17 days ago

Stars401

Eclipse RDF4J: scalable RDF for Java

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-20227 ↗	Dec 19, 2018Wednesday, 19 December 2018, 11:29	7.5 HIGH	6.4 MEDIUM
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
CVE-2018-1000644 ↗	Aug 20, 2018Monday, 20 August 2018, 19:31	—	7.5 HIGH
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.