CVE-2022-30126
Severity
5.5MEDIUM
EPSS
1.3%
top 20.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 16
Latest updateMay 23
Description
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
🔴Vulnerability Details
7📋Vendor Advisories
7Oracle▶
Oracle Oracle Communications Applications Risk Matrix: ISC (Apache Tika) — CVE-2022-30126↗2023-01-15
Oracle▶
Oracle Oracle Fusion Middleware Risk Matrix: Security Framework (Apache Tika) — CVE-2022-30126↗2022-10-15
Oracle▶
Oracle Oracle Construction and Engineering Risk Matrix: Document Management (Apache Tika) — CVE-2022-30126↗2022-07-15