What is CVE-2025-50151?

CVE-2025-50151 is a high-severity vulnerability in Apache Jena, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2025-07-21.

How severe is CVE-2025-50151?

High severity. CVSS v3 base score is 8.8 out of 10.

Improper input validation in Apache Jena

CVE-2025-50151

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apache Jena
Apache Software Foundation Jena — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@apache.org (vendor-advisory, Issue Tracking, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-50151?: CVE-2025-50151 is a high-severity vulnerability in Apache Jena, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2025-07-21.
How severe is CVE-2025-50151?: High severity. CVSS v3 base score is 8.8 out of 10.