EDB-47208
functionalApache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2019-08-05catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1335US | high8.1 | Exploit | ||
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan