607 matches found
USN-7529-1 tika vulnerabilities
It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2020-1950, CVE-2020-1951 It was discovered that Apache Tika...
CVE-2022-25169
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...
GHSA-FH5R-CRHR-QRRQ vulnerabilities
Vulnerabilities for packages: apache-tika...
GHSA-FH5R-CRHR-QRRQ vulnerabilities
Vulnerabilities for packages: wso2is, apache-tika...
CVE-2025-23184 vulnerabilities
Vulnerabilities for packages: apache-tika...
CVE-2025-23184 vulnerabilities
Vulnerabilities for packages: wso2is, apache-tika...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: apache-nifi, cassandra-reaper, kafka, cloudwatch-exporter, confluent-kafka, confluent-kafka-jre-bcfips, solr, strimzi-kafka-operator, apache-tika, druid, spark-fips, zookeeper-fips, zookeeper, spark, celeborn...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: apache-nifi, cassandra-reaper, kafka, cloudwatch-exporter, confluent-kafka, confluent-kafka-jre-bcfips, solr, strimzi-kafka-operator, apache-tika, druid, spark-fips, zookeeper-fips, zookeeper, spark, celeborn...
SUSE CVE-2016-4434
Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...
XWiki Platform Resource Management Error Vulnerability
XWiki Platform is the XWiki Foundation's suite of Wiki platforms for creating web collaboration applications. A resource management error vulnerability exists in XWiki Platform that originates from allowing an attacker to distribute malformed TAR files by manipulating file modification times...
CVE-2024-21651 XWiki Denial of Service attack through attachments
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...
CVE-2024-21651
CVE-2024-21651 affects XWiki Platform. A user can attach a file to a page that is parsed by Apache Tika as a malformed TAR file, triggering a denial of service through CPU consumption. The vulnerability is mitigated by fixes in XWiki releases 14.10.18, 15.5.3, and 15.8 RC1. The provided sources c...
XWiki vulnerable to Denial of Service attack through attachments
Impact A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU consumption. Patches This vulnerability has been patched in XWiki 14.10.18, 15.5.3 and 15.8 RC1...
PT-2024-18999 · Xwiki +1 · Xwiki Platform +2
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.18 XWiki Platform versions prior to 15.5.3 XWiki Platform versions prior to 15.8 RC1 Description: A user able to attach a file to a page can post a malformed TAR file by manipulating file modification...
VulnCheck KEV: CVE-2018-1335
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted...
PT-2023-24695 · Apache · Apache Any23
Name of the Vulnerable Software and Affected Versions: Apache Any23 affected versions not specified Description: The use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
K11522001: Apache vulnerabilities CVE-2018-1313, CVE-2018-1338, CVE-2018-1339, CVE-2018-1335, and CVE-2018-8003
Security Advisory Description CVE-2018-1313 In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java...
K57108702: Apache Tika XML External Entity vulnerability CVE-2016-4434
Security Advisory Description Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats,...