Lucene search
+L

31 matches found

OSV
OSV
•added 2022/05/31 1:20 p.m.•40 views

CVE-2022-30973 Missing fix for CVE-2022-30126 in 1.28.2

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

6.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2022/05/31 1:20 p.m.•43 views

CVE-2022-30973 Missing fix for CVE-2022-30126 in 1.28.2

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

4.9AI score0.02037EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/05/31 12:00 a.m.•15 views

Apache Tika 安全漏洞

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

5.5CVSS8.3AI score0.02037EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/05/31 12:00 a.m.•10 views

PT-2022-20430 · Apache +3 · Apache Tika +3

Name of the Vulnerable Software and Affected Versions: Apache Tika versions 1.x through 1.28.2 Description: A denial of service issue exists due to a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler, which can lead to backtracking on a specially crafted...

5.5CVSS5AI score0.02986EPSS
SaveExploits0References44
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/31 12:00 a.m.•3 views

CVE-2022-30973: Undefined Security Weakness

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

5.5CVSS5.8AI score0.02037EPSS
SaveExploits0References1
Veracode
Veracode
•added 2022/05/17 7:13 a.m.•36 views

Denial Of Service (DoS)

Apache Tika core is vulnerable to service attacks. A malicious user is able to cause denial of service conditions due to a regular expression in our StandardsText class by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler...

5.5CVSS5.3AI score0.0261EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/17 12:00 a.m.•41 views

Regular expression denial of service in apache tika

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.4AI score0.0261EPSS
SaveExploits0References12Affected Software1
Debian CVE
Debian CVE
•added 2022/05/16 5:05 p.m.•39 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS4.7AI score0.0261EPSS
SaveExploits0
OSV
OSV
•added 2022/05/16 5:05 p.m.•44 views

CVE-2022-30126 Apache Tika Regular Expression Denial of Service in Standards Extractor

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

6.4AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/16 12:00 a.m.•3 views

CVE-2022-30126: Undefined Security Weakness

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.8AI score0.0261EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/05/16 12:00 a.m.•45 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.4AI score0.0261EPSS
SaveExploits0References3
Rows per page
Query Builder