EDB-46540
functionalApache Tika-server < 1.18 - Command Injection
view exploit source exploit_dbverifiedtype remoteauthor Rhino Security Labspublished 2019-03-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1335US | high8.1 | Exploit | ||
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan