CVE-2025-66516-Writeup-POC

CVE-2025-66516: Apache Tika의 치명적인 XXE 취약점 요약 CVE-2025-66516 은 Apache Tika에서 발견된 치명적인 XML External EntityXXE 주입 취약점으로, CVSS 점수 10.0최대 심각도입니다. 이 취약점은 원격 공격자가 악성 XFAXML Forms Architecture 콘텐츠가 포함된 특수 제작된 PDF 문서를 업로드하여 임의의 파일을 읽거나, 서버 측 요청 위조SSRF를 수행하고, 민감한 데이터를 유출할 수 있게 합니다. 속성| 값 ---|--- CVE ID|...

CVE-2021-45067

CVE-2021-45067 이 버그는 ANSI 문자열을 Unicode로 처리하여 발생하는 Out of Bounds Read로, 샌드박스 처리된 Adobe Reader 프로세스에서 민감한 정보를 유출하는 데 악용될 수 있습니다. 블로그 Adobe Reader - XFA - ANSI - Unicode Confusion Information Leak 권고 CVE-2021-45067 데모...

Blackash-CVE-2025-66516

🚨 CVE-2025-66516 — 치명적인 Apache Tika 취약점 CVSS: 10.0 | 공격 유형: XXE 인젝션 | 위험 수준: 최대 🎯 핵심 요약 CVE-2025-66516은 Apache Tika의 핵심 처리 엔진에서 발견된 치명적인 XML 외부 엔티티XXE 취약점입니다. 악성 XFA 콘텐츠가 포함된 PDF 하나로 다음이 가능합니다: 🔓 민감한 파일 노출 🌐 서버 측 요청 위조SSRF 💻 잠재적 원격 코드 실행RCE 이 취약점은 전 세계 수백만 개의 문서 처리 파이프라인 에 영향을 미칩니다. 🧨 근본 원인은 무엇인가...

Tika-CVE-2025-66516-Lab

CVE-2025-66516 최소 검증 환경 이 프로젝트는 CVE-2025-66516 Apache Tika의 XML 외부 엔터티 주입 취약점을 검증하기 위한 것입니다. 취약점 개요 Apache Tika 3.2.1 및 이전 버전은 XFA 양식을 포함한 PDF 파일을 파싱할 때 외부 엔터티 로딩을 올바르게 비활성화하지 않아 XXE 취약점이 존재합니다. 공격자는 악의적인 PDF 파일을 구성하여 서버의 민감한 파일을 읽을 수 있습니다. 환경 요구 사항 JDK 11+ Maven 사용 방법 1. 악성 Payload 생성...

CVE-2025-66516-POC

⚠️ 사용 전 면책 조항 읽기 ⚠️ 교육/승인된 테스트 전용 | 라이선스 | 보안 정책 이 POC 소개 이 저장소는 Apache Tika 3.2.2 미만 버전의 XML External Entity XXE 주입 취약점 인 CVE-2025-66516 에 대한 개념 증명 POC 익스플로잇 을 포함합니다. 이 취약점은 tika-parser-pdf-module 컴포넌트의 XFA XML Forms Architecture 파서 에 영향을 미치며, 공격자가 악의적으로 조작된 PDF 문서를 통해 로컬 파일을 읽고 민감한 데이터를 유출할 수 있게...

POC-CVE-2025-54988

CVE-2025-54988 - POC 免責事項：私はこの脆弱性の最初の発見者ではありません。この投稿は、教育目的および他の方がご自身のシステムを検証する際の参考として、管理された環境で本問題を再現したプロセスを記録したものです。 テストは隔離されたラボ環境で実施され、本番システムには影響はありませんでした。 使い方： python3 xfaxxepocgen.py --mode file --file /etc/passwd -o xfapasswd.pdf python3 xfaxxepocgen.py --mode oob --ip 127.0.0.1 --port 8888...

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.1.0  by vulnerabilities in Apache Tika PDF parser module

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package Apache Tika that is affected by a critical vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version. Vulnerability Details CVEID:CVE-2025-54988 DESCRIPTION:...

XML External Entity (XXE) Injection

veraPDF-validation is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper processing of external entities in a malicious XFA stream within a crafted PDF during PDF/UA-1 validation, which allows an attacker to disclose local files or make outbound server-side...

GHSA-36MM-W85J-3Q2J veraPDF Validation XXE via XFA

Summary Description An XML External Entity Injection CWE-611 vulnerability in veraPDF allows a remote attacker to read arbitrary files on the server file system and perform Server-Side Request Forgery by submitting a crafted PDF containing a malicious XFA stream. This affects all current versions...

CVE-2026-54079 veraPDF Validation XXE via XFA

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

CVE-2026-54079 veraPDF Validation XXE via XFA

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

EUVD-2026-50368

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

CVE-2026-54079: Improper Restriction of XML External Entity Reference

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

PYSEC-2026-3027 pypdf: Manipulated FlateDecode XFA streams can exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the xfa property of a reader or writer and the corresponding stream being compressed using /FlateDecode. Patches This has been fixed in pypdf==6.7.3. Workarounds If...

PT-2026-59649

Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the xfa property of a reader or writer and the corresponding stream being compressed using /FlateDecode. Patches This has been fixed in pypdf==6.7.3. Workarounds If...

Security Bulletin: Critical XXE Vulnerability in Apache Tika Affecting Content Collector for Email, File Systems, and Microsoft SharePoint (CVE-2025-66516)

Summary Critical XML External Entity in Apache Tika on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to internal resources or third-party...

CVE-2025-66769

A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service DoS via a crafted XFA packet...

CVE-2026-5939

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...

CVE-2026-5939 UAF in Foxit PDF Editor/Reader via XFA calculate event

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...

CVE-2026-5939

CVE-2026-5939 describes a use-after-free (UAF) vulnerability in Foxit PDF Editor/Reader triggered by a crafted XFA PDF during the calculate event. The issue affects the application when processing XFA calculate logic, potentially crashing the program and enabling arbitrary code execution. The lin...