Lucene search
GoogleOSV:GHSA-9R24-GP44-H3PMHistoryOct 17, 2018 - 3:43 p.m.
High severity vulnerability that affects org.apache.tika:tika-core
2018-10-1715:43:43
Google
osv.dev
22
0.968 High
EPSS
Percentile
99.7%
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.
References
packetstormsecurity.com/files/153864/Apache-Tika-1.17-Header-Command-Injection.html
www.securityfocus.com/bid/104001
access.redhat.com/errata/RHSA-2019:3140
github.com/advisories/GHSA-9r24-gp44-h3pm
lists.apache.org/thread.html/b3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca@%3Cdev.tika.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2018-1335
www.exploit-db.com/exploits/46540
Related
cve
cve
CVE-2018-1335
2018-04-25 21:29:00
exploitpack
exploitpack
Apache Tika-server 1.18 - Command Injection
2019-03-13 00:00:00
debiancve
debiancve
CVE-2018-1335
2018-04-25 21:29:00
cvelist
cvelist
CVE-2018-1335
2018-04-25 00:00:00
zdt
zdt
Apache Tika-server < 1.18 - Command Injection Exploit
2019-03-13 00:00:00
Apache Tika 1.15 - 1.17 - Header Command Injection Exploit
2019-08-05 00:00:00
packetstorm
packetstorm
Apache Tika 1.17 Header Command Injection
2019-08-02 00:00:00
Apache Tika Server Command Injection
2019-03-13 00:00:00
redhatcve
redhatcve
CVE-2018-1335
2018-04-27 01:59:08
ubuntucve
ubuntucve
CVE-2018-1335
2018-04-25 00:00:00
osv
osv
CVE-2018-1335
2018-04-25 21:29:00
github
github
Command injection in org.apache.tika:tika-core
2018-10-17 15:43:43
checkpoint_advisories
checkpoint_advisories
Apache Tika Command Injection (CVE-2018-1335)
2018-12-06 00:00:00
nuclei
nuclei
Apache Tika <1.1.8- Header Command Injection
2021-02-27 03:18:29
nvd
nvd
CVE-2018-1335
2018-04-25 21:29:00
rhino
rhino
Exploiting CVE-2018-1335:Command Injection in Apache Tika
2019-03-12 10:41:43
metasploit
metasploit
Apache Tika Header Command Injection
2019-03-29 02:05:05
veracode
veracode
Arbitrary Command Injection
2018-04-26 02:35:04
prion
prion
Design/Logic Flaw
2018-04-25 21:29:00
attackerkb
attackerkb
Apache Tika Header Command Injection CVE-2018-1335
2018-04-25 00:00:00
exploitdb
exploitdb
Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
2019-08-05 00:00:00
Apache Tika-server < 1.18 - Command Injection
2019-03-13 00:00:00
openvas
openvas
Apache Tika Server 1.17 Multiple Vulnerabilities
2018-04-26 00:00:00
f5
f5
redhat
redhat
ibm
ibm