CVE-2018-1335observed exploitation

CVE-2018-1335: vulnerability in Apache Tika

Published · Updated

Follow this CVE+ Monitor Apache Tika+ Monitor tika

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 94%
from disclosure to weapon322 days
Published on NVDApr 25
1st PoC+322d
metasploitApr 25
VulnCheck+2050d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product
Red Hat Satellite 5
no_fix_planned: Will not fix
Fixed
1 product
Red Hat JBoss Data Virtualization 6.4.8
fix ↗
Not affected
7 products (11 components) — because the vulnerable code is not present in the product
Red Hat Software Collections · Red Hat BPM Suite 6 · Red Hat Fuse 7 · Red Hat JBoss BRMS 5 · Red Hat JBoss BRMS 6 · and others 2
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.
Affected products
Apache Software Foundation · Apache Tika
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Apache Tika

In the same product, most dangerous first.

CVE-2018-11761—CVE-2018-11761EPSS 9.5%CVE-2018-11796—CVE-2018-11796EPSS 7.5%CVE-2018-17197—CVE-2018-17197EPSS 6.1%CVE-2018-11762—CVE-2018-11762EPSS 5.4%CVE-2021-28657—Infinite loop in Apache Tika's MP3 parserEPSS 2.7%CVE-2022-30126—Apache Tika Regular Expression Denial of Service in Standards ExtractorEPSS 2.6%