Debian/tika: high 8.4
Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA fi
Action: Upgrade tika to 1.22-2+deb11u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.22-2+deb11u1 | - |
Fixed versions
| 1.22-2+deb11u1 |
Sources
published · modified · JSON