Search for packages
| purl | pkg:maven/org.apache.tika/tika-server@1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-42ad-sh45-7fev
Aliases: CVE-2021-28657 GHSA-567x-m4wm-87v8 |
Loop with Unreachable Exit Condition (Infinite Loop) A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser |
Affected by 2 other vulnerabilities. |
|
VCID-8qc9-3mxe-8ydp
Aliases: CVE-2022-33879 GHSA-6q8v-2hvm-fx37 |
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-hvfw-yh4j-cqfm
Aliases: CVE-2015-3271 GHSA-ccjp-w723-2jf2 |
Exposure of Sensitive Information to an Unauthorized Actor Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. |
Affected by 4 other vulnerabilities. |
|
VCID-uyg4-mswu-s3f5
Aliases: CVE-2018-1335 GHSA-9r24-gp44-h3pm |
Code Injection From Apache Tika, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. |
Affected by 3 other vulnerabilities. |
|
VCID-zj8z-ja31-mkcr
Aliases: CVE-2022-30973 GHSA-qw3f-w4pf-jh5f |
tika-core: incomplete fix for CVE-2022-30126 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||