CVE-2019-10094

Publication date

2019-08-02 18:37:52

Family

apache

State

PUBLISHED

Description

A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tikas RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.