~ / search / GHSA-6jq2-789q-fff2

GHSA-6jq2-789q-fff2

High severity vulnerability that affects org.apache.tika:tika-core

Source: GitHub Advisory Database (reviewed) High CVE-2018-11761

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.tika:tika-core >= 0.1, < 1.19.1 1.19.1

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.

References

External links from the advisory. They lead to third-party sites.