MediumFix available
apache-jena — security advisory
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).
- Products
- apache-jena
- Affected versions
- Not specified
- Fixed versions
- 4.5.0-1
- CVEs
- CVE-2021-33192
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 00:34 UTC · Revision 1
Source evidence
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).
osv:DEBIAN-CVE-2021-33192
apache-jena
Fixed versions: 4.5.0-1
apache-jena
Fixed versions: 4.5.0-1
apache-jena
Fixed versions: 4.5.0-1
Complete source record
{
"id": "8ba03a0e21f0285711ec97cb696022b8d7542387535dd2c914854e14ea67840e",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2021-33192",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2021-33192",
"summary": "A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).",
"evidence": "osv:DEBIAN-CVE-2021-33192",
"products": [
{
"name": {
"value": "apache-jena",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.5.0-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "apache-jena",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.5.0-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "apache-jena",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.5.0-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2021-33192",
"aliases": [
"DEBIAN-CVE-2021-33192"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.0-1"
}
]
}
],
"package": {
"name": "apache-jena",
"purl": "pkg:deb/debian/apache-jena?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-33192.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.0-1"
}
]
}
],
"package": {
"name": "apache-jena",
"purl": "pkg:deb/debian/apache-jena?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-33192.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.0-1"
}
]
}
],
"package": {
"name": "apache-jena",
"purl": "pkg:deb/debian/apache-jena?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-33192.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-23T18:03:26.882526392Z",
"provider": "osv",
"upstream": [
"CVE-2021-33192"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2021-33192"
]
},
"related_cves": [
{
"value": "CVE-2021-33192",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 421547,
"published_at": "2021-07-05T10:15:08.457+00:00"
}