CVE-2016-6809

CRITICAL9.8EPSS 7.0%

Apache Tika allows Java code execution for serialized objects embedded in MATLAB files

發布日:2018/10/17修改日:2026/4/28

描述

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(13)