Debian/tika: critical 9.8
Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection
Action: Upgrade tika to 1.22-2+deb11u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.22-2+deb11u1 | - |
Fixed versions
| 1.22-2+deb11u1 |
Sources
published · modified · JSON