CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10094

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.9%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2019-10094

Apache » Tika » Version: 1.10

cpe:2.3:a:apache:tika:1.10
Apache » Tika » Version: 1.11

cpe:2.3:a:apache:tika:1.11
Apache » Tika » Version: 1.12

cpe:2.3:a:apache:tika:1.12
Apache » Tika » Version: 1.13

cpe:2.3:a:apache:tika:1.13
Apache » Tika » Version: 1.14

cpe:2.3:a:apache:tika:1.14
Apache » Tika » Version: 1.15

cpe:2.3:a:apache:tika:1.15
Apache » Tika » Version: 1.16

cpe:2.3:a:apache:tika:1.16
Apache » Tika » Version: 1.17

cpe:2.3:a:apache:tika:1.17
Apache » Tika » Version: 1.18

cpe:2.3:a:apache:tika:1.18
Apache » Tika » Version: 1.19

cpe:2.3:a:apache:tika:1.19
Apache » Tika » Version: 1.19.1

cpe:2.3:a:apache:tika:1.19.1
Apache » Tika » Version: 1.20

cpe:2.3:a:apache:tika:1.20
Apache » Tika » Version: 1.21

cpe:2.3:a:apache:tika:1.21
Apache » Tika » Version: 1.7

cpe:2.3:a:apache:tika:1.7
Apache » Tika » Version: 1.8

cpe:2.3:a:apache:tika:1.8
Apache » Tika » Version: 1.9

cpe:2.3:a:apache:tika:1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10094

Products

Pricing

Contact Us