1. Home
  2. Vulnerabilities
  3. CVE-2022-33879

CVE-2022-33879

CVSS v3.1 3.3 (Low)
33% Progress
CVSS v2.0 2.6 (Low)
26% Progress
EPSS 0.07 % (33th)
0.07% Progress
Affected Products 1
Advisories 3
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.

Weaknesses
CWE-NVD-Other
Related CVEs
CVE Status
PUBLISHED
CNA
Apache Software Foundation
Published Date
2022-06-27 22:15:09
(2 years ago)
Updated Date
2022-10-28 13:53:14
(23 months ago)

Affected Products

Apache

Configuration #1

    CPE23 From Up To
  Apache Tika prior 1.28.4 version cpe:2.3:a:apache:tika < 1.28.4
  Apache Tika from 2.0.0 version and prior 2.4.1 version cpe:2.3:a:apache:tika >= 2.0.0 < 2.4.1