CVE-2022-30126

Katalog CVE

CVSS 5.5 · Medium EPSS 2,6%

Kerentanan pada apache tika, oracle primavera unifier. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

Rincian

Terbit di NVD

16 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4 mailing list · advisory vendor
• http://www.openwall.com/lists/oss-security/2022/05/16/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/05/31/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/06/27/5 mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220624-0004/ advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujul2022.html advisory pihak ketiga