CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

93.76% chance of exploitation in the next 30 days, 100th percentile

Nuclei

high

Published

2018-04-25

Updated

2024-09-17

Proof-of-concept exploits (5)

• DigitalNinja00/CVE-2018-13350★ · 2024-06-06
• N0b1e6/CVE-2018-1335-Python30★ · 2020-02-11
• SkyBlueEternal/CVE-2018-1335-EXP-GUI14★ · 2019-03-20
• canumay/cve-2018-13351★ · 2021-01-18
• siramk/CVE-2018-13350★ · 2021-03-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1335.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_tika_jp2_jsc…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/47208
• https://www.exploit-db.com/exploits/46540

References

• CVE Record
• NVD entry

Related

• CVE-2016-4977
• CVE-2019-2725
• CVE-2023-6307
• CVE-2018-13349
• CVE-2018-13350
• CVE-2018-13341