CVE-2015-3271

Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header

published December 15, 2016

CVSS
—
EPSS
7%
Percentile
93.7
In the wild
Unconfirmed
What it is

Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06522 · 93.7th percentile
Published
2016-12-15T22:00Z
EPSS history
Timeline
  • 15 DEC 22:00Z
    Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header
    cvelistv5