galoryber/cve-2025-54988-VulnTikaProject

PoC

Creating a vulnerable instance to test against

view exploit source poc_in_githubauthor galoryberpublished 2025-12-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-54988US	—	47.9% (99th)	Exploit	2025-08-20
Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.