Details of VAR-202608-0165

ID

VAR-202608-0165

CVE

CVE-2026-61372

TITLE

Apache Software Foundation of Apache Jena Fuseki Past traversal vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2026-027635

DESCRIPTION

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue. 6.2.0 It is recommended to upgrade to .- All information handled by the software may be leaked to external parties. - No rewriting will occur to the information handled by the software. - The software will not stop

Trust: 1.62

sources: NVD: CVE-2026-61372 // JVNDB: JVNDB-2026-027635

AFFECTED PRODUCTS

vendor:	apache	model:	jena fuseki	scope:	lt	version:	6.2.0	Trust: 1.0
vendor:	apache	model:	jena fuseki	scope:	eq	version:	6.2.0	Trust: 0.8
vendor:	apache	model:	jena fuseki	scope:	eq	version:	-	Trust: 0.8
vendor:	apache	model:	jena fuseki	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-027635 // NVD: CVE-2026-61372

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2026-61372
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-027635
value:	HIGH
Trust: 0.8

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2026-61372
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-027635
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-027635 // NVD: CVE-2026-61372

PROBLEMTYPE DATA

problemtype:	CWE-22	Trust: 1.0
problemtype:	Path traversal (CWE-22) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-027635 // NVD: CVE-2026-61372

PATCH

title:

Apache Jena Fuseki

url:

https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84

Trust: 0.8

sources: JVNDB: JVNDB-2026-027635

EXTERNAL IDS

db:	NVD	id:	CVE-2026-61372	Trust: 2.6
db:	OPENWALL	id:	OSS-SECURITY/2026/08/03/5	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-027635	Trust: 0.8

sources: JVNDB: JVNDB-2026-027635 // NVD: CVE-2026-61372

REFERENCES

url:	https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/08/03/5	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-61372	Trust: 0.8

sources: JVNDB: JVNDB-2026-027635 // NVD: CVE-2026-61372

SOURCES

db:	JVNDB	id:	JVNDB-2026-027635
db:	NVD	id:	CVE-2026-61372

LAST UPDATE DATE

2026-08-13T23:24:13.579000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-027635	date:	2026-08-10T03:17:00
db:	NVD	id:	CVE-2026-61372	date:	2026-08-07T15:15:13.567

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-027635	date:	2026-08-10T00:00:00
db:	NVD	id:	CVE-2026-61372	date:	2026-08-03T17:16:39.467