Lucene search
Veracode Vulnerability DatabaseVERACODE:6192HistoryApr 26, 2018 - 2:35 a.m.
Arbitrary Command Injection
2018-04-2602:35:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.968 High
EPSS
Percentile
99.7%
tika-server is vulnerable to arbitrary command injection. When the Tika-server is open to untrusted clients, it allows the attackers to insert arbitrary commands via the header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache tika server module | eq | 1.7 | |
| apache tika server module | le | 1.6 | |
| apache tika server module | le | 1.17 |
References
packetstormsecurity.com/files/153864/Apache-Tika-1.17-Header-Command-Injection.html
www.securityfocus.com/bid/104001
github.com/apache/tika/compare/5b12e7f866f66e737d3b609b3f598fa792a564c8...d1bc09386405d28d6b0f0a29ce8c3e7efd72d6c7
lists.apache.org/thread.html/b3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca@%3Cdev.tika.apache.org%3E
www.exploit-db.com/exploits/46540/
Related
cve
cve
CVE-2018-1335
2018-04-25 21:29:00
exploitpack
exploitpack
Apache Tika-server 1.18 - Command Injection
2019-03-13 00:00:00
debiancve
debiancve
CVE-2018-1335
2018-04-25 21:29:00
cvelist
cvelist
CVE-2018-1335
2018-04-25 00:00:00
zdt
zdt
Apache Tika-server < 1.18 - Command Injection Exploit
2019-03-13 00:00:00
Apache Tika 1.15 - 1.17 - Header Command Injection Exploit
2019-08-05 00:00:00
packetstorm
packetstorm
Apache Tika 1.17 Header Command Injection
2019-08-02 00:00:00
Apache Tika Server Command Injection
2019-03-13 00:00:00
redhatcve
redhatcve
CVE-2018-1335
2018-04-27 01:59:08
ubuntucve
ubuntucve
CVE-2018-1335
2018-04-25 00:00:00
osv
osv
CVE-2018-1335
2018-04-25 21:29:00
High severity vulnerability that affects org.apache.tika:tika-core
2018-10-17 15:43:43
github
github
Command injection in org.apache.tika:tika-core
2018-10-17 15:43:43
checkpoint_advisories
checkpoint_advisories
Apache Tika Command Injection (CVE-2018-1335)
2018-12-06 00:00:00
nuclei
nuclei
Apache Tika <1.1.8- Header Command Injection
2021-02-27 03:18:29
nvd
nvd
CVE-2018-1335
2018-04-25 21:29:00
rhino
rhino
Exploiting CVE-2018-1335:Command Injection in Apache Tika
2019-03-12 10:41:43
metasploit
metasploit
Apache Tika Header Command Injection
2019-03-29 02:05:05
prion
prion
Design/Logic Flaw
2018-04-25 21:29:00
attackerkb
attackerkb
Apache Tika Header Command Injection CVE-2018-1335
2018-04-25 00:00:00
exploitdb
exploitdb
Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
2019-08-05 00:00:00
Apache Tika-server < 1.18 - Command Injection
2019-03-13 00:00:00
openvas
openvas
Apache Tika Server 1.17 Multiple Vulnerabilities
2018-04-26 00:00:00
f5
f5
redhat
redhat
ibm
ibm