CVE-2022-30126

Apache Tika Regular Expression Denial of Service in Standards Extractor

published May 16, 2022

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02598 · 85.2th percentile
Published
2022-05-16T17:05Z
EPSS history
Timeline
  • 16 MAY 17:05Z
    Apache Tika Regular Expression Denial of Service in Standards Extractor
    cvelistv5