CVE-2015-3271

CWE-200 — Information Exposure8 documents7 sources
Severity
5.3MEDIUM
EPSS
1.1%
top 22.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Tika
Timeline
PublishedDec 15
Latest updateOct 17

Description

Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDapache/tika1.9

🔴Vulnerability Details

3
OSV
Apache Tika Server exposes sensitive information↗2018-10-17
▶
GHSA
Apache Tika Server exposes sensitive information↗2018-10-17
▶
CVEList
CVE-2015-3271: Apache Tika server (aka tika-server) in Apache Tika 1↗2016-12-15
▶

📋Vendor Advisories

2
Debian
CVE-2015-3271: tika - Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attac...↗2015
▶
Apache
Apache tika: CVE-2015-3271↗
▶

💬Community

2
Bugzilla
CVE-2015-3271 tika: Information disclosure vulnerability when running Apache Tika Server [fedora-all]↗2015-08-25
▶
Bugzilla
CVE-2015-3271 tika: Information disclosure vulnerability when running Apache Tika Server↗2015-08-25
▶
CVE-2015-3271 (MEDIUM CVSS 5.3) | Apache Tika server (aka tika-server | cvebase.io