Lucene search

K
cvelistApacheCVELIST:CVE-2019-10094
HistoryAug 02, 2019 - 6:37 p.m.

CVE-2019-10094

2019-08-0218:37:52
apache
www.cve.org

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika’s RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.

CNA Affected

[
  {
    "product": "Apache Tika",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "1.7 to 1.21"
      }
    ]
  }
]

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%