CVE-2015-3271

Apache Tika server aka tika-server in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header...

CVE-2015-3271

Apache Tika server (tika-server) up to v1.9 is vulnerable when used as a web service with untrusted access: a remote attacker can read arbitrary files via the HTTP fileUrl header, causing information disclosure from the server's filesystem. Root cause is the server fetching content from the URL p...