Executive brief
Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF
Affected products
- Maven org.apache.tika:tika-parsers
- Maven org.apache.tika:tika-parser-pdf-module
Junglewise Threat Intelligence
CVE-2025-54988: Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF
CVE-2025-54988 · Severity: low · CVSS 3.1 · Published 2025-08-20
Technologies: org.apache.tika:tika-parsers (Maven). Vendors: Maven.