CVE-2018-11796
1 advisory.
Maven/org.apache.tika:tika-core CVE-2018-11796: high 7.5
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
Action: Upgrade org.apache.tika:tika-core to 1.19.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1 | 1.19.1 | - |
Fixed versions
| 1.19.1 |
Sources
- osv: GHSA-h8q5-g2cj-qr5h
- https://nvd.nist.gov/vuln/detail/CVE-2018-11796
- https://access.redhat.com/errata/RHSA-2019:3892
- https://github.com/advisories/GHSA-h8q5-g2cj-qr5h
- https://github.com/apache/tika
- https://lists.apache.org/thread.html/88de8350cda9b184888ec294c813c5bd8a2081de8fd3666f8904bc05@%3Cdev.tika.apache.org%3E
- https://security.netapp.com/advisory/ntap-20190903-0002
- http://www.securityfocus.com/bid/105585
CVE-2018-11796 · published · modified · JSON