| Advisory ID |
project_kb_statements/CVE-2016-6809 |
| Aliases |
|
| Summary |
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.
|
| Status |
Published |
|
Exploitability |
0.5
|
| Weighted Severity |
0.0
|
| Risk |
|
| Affected and Fixed Packages |
Package Details
|
| Introduced and Fixed Package Commit Patches |
Package Commit Patches Details
|
Weaknesses (0)
| Reference id |
Reference type |
URL |
|
There are no known references.
|
|
No exploits are available.
|
No EPSS data available for this advisory.
| Patch URL |
|
There are no known patches.
|
|
There are no known vectors.
|
There are no SSVC decisions available.