CVE-2015-3271: Exposure of Sensitive Information to an Unauthorized Actor

Apache Tika server aka tika-server in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header...