org.apache.tika:tika-bundle@1.2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.apache.tika:tika-bundle package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H XML External Entity (XXE) Injection `org.apache.tika:tika-bundle` It was found that the parsing of OOXML, XMP in PDF, and some other file formats by Apache Tika would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.	[1.0,1.7]