Executive brief
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
Affected products
- Maven org.apache.tika:tika-core
Junglewise Threat Intelligence
CVE-2018-11796: Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
CVE-2018-11796 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: org.apache.tika:tika-core (Maven). Vendors: Maven.