Apache Tika allows Java code execution for serialized objects embedded in MATLAB files

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-6809 · ADVISORY
• apache/tika commit 8a68b5d · WEB
• dist.apache.org/repos/dist/release/tika/CHANGES-1.14.txt · WEB
• GitHub Advisory GHSA-j8g6-2wh7-6439 · ADVISORY
• apache/tika · PACKAGE
• lists.apache.org/thread.html/91eb639ef619b9a26b40020ca6732e7dbe457f7322ed5f1df49e411a@%3Cdev.nutch.apache.org%3E · WEB
• lists.apache.org/thread.html/d2375da29d89e679abf5d845db76d6f798fdc6f7d44f2c788e8a0fb9@%3Cuser.nutch.apache.org%3E · WEB
• lists.apache.org/thread.html/e414754a6c57ce7194b731e211cd6b2cbb41f2c7000e3fb9c6b6ec78@%3Cdev.lucene.apache.org%3E · WEB
• lists.apache.org/thread.html/r2f6f6c130b12b7332f323f74d031072b1517065ce28a22346791ffb6@%3Cissues.lucene.apache.org%3E

Mais vulnerabilidades de org.apache.tika:tika-core

• CVE-2025-66516CRÍTICO 9.8Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms al…
• CVE-2022-30973MÉDIO 5.5We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the Standards…
• CVE-2022-30126MÉDIO 5.5In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of ser…
• CVE-2019-10094ALTO 7.8A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in …
• CVE-2019-10088ALTO 8.8A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade …