CVE-2019-10093

MEDIUM6.5EPSS 1.4%

Allocation of Resources Without Limits or Throttling in Apache Tika

發布日:2019/8/6修改日:2026/4/28

描述

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

參考連結(10)