Vulnerabilities in The Apache Software Foundation

2 results

CVE-2019-0218—A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.EPSS 5.1%CVE-2020-9489—A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memEPSS 2.5%