Comparison errorr in org.apache.tika:tika-core

MEDIO 5.5CVE-2018-8017 · GHSA-j53j-gmr9-h8g3 · Published 19/09/2018 · updated 17/06/2026

En resumen

CVE-2018-8017 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a org.apache.tika:tika-core, tika (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.3%, mayor que el 83.2% de las vulnerabilidades.
Solución: actualizar a 1.19 o posterior.

Package	Affected versions	Patched versions
org.apache.tika:tika-core Maven	`≥ 1.2, < 1.19`	`1.19`
tika apache	`≥ 1.2, ≤ 1.18`	No fix yet

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

NVD description

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.2, < 1.19

1.19

≥ 1.2, ≤ 1.18

No fix yet

Más vulnerabilidades de org.apache.tika:tika-core

Ver todo →