CVE-2019-10094

Name of the Vulnerable Software and Affected Versions Apache Tika versions 1.7 through 1.21

Description A carefully crafted package or compressed file that yields the same file when unzipped or uncompressed can cause a StackOverflowError in the RecursiveParserWrapper. This issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Apache Tika versions 1.7 through 1.21, upgrade to version 1.22 or later to resolve the issue.