Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7511
HistorySep 20, 2018 - 3:32 a.m.

Arbitrary File Overwrite

2018-09-2003:32:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.001

Percentile

42.4%

Apache tika-app is vulnerable to arbitrary file overwrite. An input file that has an embedded file containing an absolute path such as C:/evil.dll will cause the application to overwrite the file when the extract directory tag --extract-dir= is not specified on the commandline.