arsalanraja987/java-cve-2021-29425-tika-xxe

PoC

arsalanraja987/java-cve-2021-29425-tika-xxe

view exploit source poc_in_githubauthor arsalanraja987published 2025-07-07catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-29425USmedium4.8Exploit
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value,…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan