GHSA-5mf7-26mw-3rqr

ghsaUSosv

Moderate severity vulnerability that affects org.apache.tika:tika-core

view advisory published 2018-10-17Licence: CC-BY-4.0

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-1338US	medium5.5	1.92% (80th)	—	2018-04-25
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.