CVE-2018-11762
EUVD-2018-070619.09.2018, 14:29
In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, such as "C:/evil.bat", tika-app would overwrite that file.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | tika | 0.9 ≤ 𝑥 ≤ 1.18 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References