Security Advisory

CVE-2019-10094

7.8
HIGH

Vulnerability Description

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
Published Date August 2, 2019
Official Source NIST NVD Advisory