Regular expression denial of service in apache tika

🗓️ 17 May 2022 00:00:37Reported by GitHub Advisory DatabaseType

Regular expression denial of service in Apache Tika, standardsExtractingContentHandler vulnerabilit

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	29 Jun 202202:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tika security vulnerabilities found during Open Source Scan in IBM Content Collector for email in Content Search Services (affected, not vulnerable)	30 Dec 202221:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis vulnerable to multiple vulnerabilities in Apache Tika (CVE-2022-30126, CVE-2022-33879, CVE-2022-30973)	17 Nov 202216:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	24 Jun 202214:50	–	ibm
ATTACKERKB	CVE-2022-33879	27 Jun 202222:15	–	attackerkb
ATTACKERKB	CVE-2022-30973	31 May 202214:15	–	attackerkb
ATTACKERKB	CVE-2022-30126	16 May 202217:15	–	attackerkb

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-30126
lists	www.lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4
openwall	www.openwall.com/lists/oss-security/2022/05/16/3
openwall	www.openwall.com/lists/oss-security/2022/05/31/2
openwall	www.openwall.com/lists/oss-security/2022/06/27/5
oracle	www.oracle.com/security-alerts/cpujul2022.html
github	www.github.com/apache/tika/commit/83b0de4d60161ebd4bc224141a959ac8c18d95f4
github	www.github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265
github	www.github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51
github	www.github.com/advisories/GHSA-qw3f-w4pf-jh5f

02 Sep 2025 22:23Current

5.4Medium risk

Vulners AI Score5.4

CVSS 24.3

CVSS 3.15.5

EPSS0.01313