Lucene search
Ubuntu.comUB:CVE-2018-1335HistoryApr 25, 2018 - 12:00 a.m.
CVE-2018-1335
2018-04-2500:00:00
ubuntu.com
ubuntu.com
16
0.967 High
EPSS
Percentile
99.7%
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted
headers to tika-server that could be used to inject commands into the
command line of the server running tika-server. This vulnerability only
affects those running tika-server on a server that is open to untrusted
clients. The mitigation is to upgrade to Tika 1.18.
References
www.openwall.com/lists/oss-security/2018/04/25/8
launchpad.net/bugs/cve/CVE-2018-1335
lists.apache.org/thread.html/b3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca@%3Cdev.tika.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2018-1335
security-tracker.debian.org/tracker/CVE-2018-1335
www.cve.org/CVERecord?id=CVE-2018-1335
Related
osv
osv
CVE-2018-1335
2018-04-25 21:29:00
High severity vulnerability that affects org.apache.tika:tika-core
2018-10-17 15:43:43
zdt
zdt
Apache Tika 1.15 - 1.17 - Header Command Injection Exploit
2019-08-05 00:00:00
Apache Tika-server < 1.18 - Command Injection Exploit
2019-03-13 00:00:00
github
github
Command injection in org.apache.tika:tika-core
2018-10-17 15:43:43
nuclei
nuclei
Apache Tika <1.1.8- Header Command Injection
2021-02-27 03:18:29
rhino
rhino
Exploiting CVE-2018-1335:Command Injection in Apache Tika
2019-03-12 10:41:43
metasploit
metasploit
Apache Tika Header Command Injection
2019-03-29 02:05:05
checkpoint_advisories
checkpoint_advisories
Apache Tika Command Injection (CVE-2018-1335)
2018-12-06 00:00:00
exploitpack
exploitpack
Apache Tika-server 1.18 - Command Injection
2019-03-13 00:00:00
cve
cve
CVE-2018-1335
2018-04-25 21:29:00
debiancve
debiancve
CVE-2018-1335
2018-04-25 21:29:00
cvelist
cvelist
CVE-2018-1335
2018-04-25 00:00:00
redhatcve
redhatcve
CVE-2018-1335
2018-04-27 01:59:08
packetstorm
packetstorm
Apache Tika 1.17 Header Command Injection
2019-08-02 00:00:00
Apache Tika Server Command Injection
2019-03-13 00:00:00
veracode
veracode
Arbitrary Command Injection
2018-04-26 02:35:04
attackerkb
attackerkb
Apache Tika Header Command Injection CVE-2018-1335
2018-04-25 00:00:00
prion
prion
Design/Logic Flaw
2018-04-25 21:29:00
exploitdb
exploitdb
Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
2019-08-05 00:00:00
Apache Tika-server < 1.18 - Command Injection
2019-03-13 00:00:00
openvas
openvas
Apache Tika Server 1.17 Multiple Vulnerabilities
2018-04-26 00:00:00
f5
f5
redhat
redhat
ibm
ibm