GHSA-mm7m-xg4h-6m52HighCVSS 7.8

Allocation of Resources Without Limits or Throttling in Apache Tika

Published
August 6, 2019
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-10094 →

📋 Description

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.

🎯 Affected products1

  • maven/org.apache.tika:tika-core:>= 1.7, < 1.22

🔗 References (9)