Executive brief
Apache Tika has XXE vulnerability
Affected products
- Maven org.apache.tika:tika-parsers
- Maven org.apache.tika:tika-parser-pdf-module
- Maven org.apache.tika:tika-core
Junglewise Threat Intelligence
CVE-2025-66516: Apache Tika has XXE vulnerability
CVE-2025-66516 · Severity: medium · CVSS 4 · Published 2025-12-04
Technologies: org.apache.tika:tika-parsers (Maven), org.apache.tika:tika-core (Maven). Vendors: Maven.
Related threats
- Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF
- Regular expression denial of service in apache tika
- Allocation of Resources Without Limits or Throttling in Apache Tika
- Allocation of Resources Without Limits or Throttling in Apache Tika
- Allocation of Resources Without Limits or Throttling in Apache Tika