The vulnerabilities of the tika-core, tika-pdf-module, and tika-parsers modules in the Apache Tika content discovery and analysis framework allow attackers to perform XXE attacks.

The vulnerability of the tika-core, tika-pdf-module, and tika-parsers modules in the Apache Tika content discovery and analysis framework is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks by sendin...