Security Advisory
CVE-2021-28657
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A carefully crafted or corrupt file may trigger an infinite loop in Tikas MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.