CVE-2019-10093

CVE-2019-10093: vulnerability in Apache Tika

Published · Updated

Follow this CVE+ Monitor Apache Tika+ Monitor tika

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.7%
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.
Affected products
Apache · Apache Tika
Related CVEs — Apache Tika

In the same product, most dangerous first.

CVE-2019-10088—CVE-2019-10088EPSS 4.8%CVE-2020-1950—CVE-2020-1950EPSS 3.0%CVE-2019-10094—CVE-2019-10094EPSS 2.5%