Rewterz Threat Advisory – CVE-2022-30973 – Apache Tika Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-30973

Apache Tika is vulnerable to a denial of service, caused by a regular expression denial of service (ReDoS) flaw in the StandardsText class in the StandardsExtractingContentHandler. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause a denial of service condition.

Impact

• Denial of Service

Indicators Of Compromise

CVE

• CVE-2022-30973

Affected Vendors

Apache

Affected Products

Apache Tika 1.28.2

Remediation

Upgrade to the latest version of Apache Tika, available from the Apache Web site.

Apache Website