Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-30126

Опубликовано: 16 мая 2022
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*
Версия до 1.28.3 (исключая)
cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*
Версия от 2.0.0 (включая) до 2.4.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
Версия от 17.7 (включая) до 17.12 (включая)
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01313
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

CVSS3: 3.1
redhat
больше 3 лет назад

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

CVSS3: 5.5
debian
больше 3 лет назад

In Apache Tika, a regular expression in our StandardsText class, used ...

CVSS3: 5.5
github
больше 3 лет назад

Regular expression denial of service in apache tika

EPSS

Процентиль: 79%
0.01313
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other