[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTPMiiq1WVwnHBoSB5zXE_SNK0tV2DdpY3PztOOf8cdM":3,"g5a-risk:CVE-2018-1335":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":72,"weaknesses":73,"weaknessesCount":47,"isActivelyExploited":77,"cisaInfo":15,"otxData":15,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":113,"notableEvents":114},"CVE-2018-1335","What is CVE-2018-1335?","From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command lin...","2018-04-25T21:29:00.297","2023-11-07T02:55:59.1",8.1,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":28,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED",2.2,5.9,[29],{"Source":18,"Type":19,"CVSSData":30,"BaseSeverity":23,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":31,"VectorString":32,"AccessVector":22,"AccessComplexity":33,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,8.6,10,0.93555,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"apache","tika","*","cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*",1,[49,53,59,63,67],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F153864\u002FApache-Tika-1.17-Header-Command-Injection.html","Packetstormsecurity",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104001","Securityfocus",[57,58],"Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3140","Red Hat",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca%40%3Cdev.tika.apache.org%3E","Apache",[],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46540\u002F","Exploit-db",[71,57,58],"Exploit",5,[74],{"id":75,"name":75,"description":76},"Unknown","NVD-CWE-noinfo",false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2018-1335? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1335, a high severity cyber security vulnerability from 2018. High exploit probability (93.6%). From Apache Tika versions ...","CVE-2018-1335, CVE-2018-1335 vulnerability, CVE-2018-1335 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, tika vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-1335",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1335","Cybersecurity","CVE-2018-1335, CVE-2018-1335 vulnerability, CVE-2018-1335 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":15,"Negate":15,"Nodes":106},[107],{"Operator":108,"Negate":15,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":111,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":112,"VersionEndIncluding":15},"2EFBC1D4-A672-40D9-BCF8-7AC016D6F1BF","1.18",[],[],{"lastModified":11,"cacheTime":116,"version":31},1792355991561,{"score":118,"band":40,"action":119,"scoredAt":120},81,"Emergency patch","2026-10-16T06:43:55.618418+00:00"]