CVE-2015-3271

Fixed upstream EPSS 7%

Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.

Published 2016-12-15 · CVE record · OSV

Products: apache tika

Fixed upstream