{"id":"CVE-2018-1335","aliases":["DEBIAN-CVE-2018-1335","EUVD-2018-0566","GHSA-9r24-gp44-h3pm","UBUNTU-CVE-2018-1335"],"status":"published","title":"Command injection in org.apache.tika:tika-core","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.93644,"percentile":0.99843,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2018-04-25T21:00:00Z","modified":"2026-10-24T10:30:31Z","exploits":[{"source":"exploitdb","id":"EDB-46540","title":"Apache Tika-server \u003c 1.18 - Command Injection","type":"remote","platform":"windows","date":"2019-03-13","verified":true,"url":"https://www.exploit-db.com/exploits/46540"},{"source":"exploitdb","id":"EDB-47208","title":"Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)","type":"remote","platform":"windows","date":"2019-08-05","verified":true,"url":"https://www.exploit-db.com/exploits/47208"},{"source":"metasploit","id":"exploit/windows/http/apache_tika_jp2_jscript","title":"Apache Tika Header Command Injection","type":"exploit","platform":"Windows","date":"2018-04-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/apache_tika_jp2_jscript"},{"source":"nuclei","id":"CVE-2018-1335","title":"Apache Tika \u003c 1.1.8 - Header Command Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1335.yaml"},{"source":"pocgithub","id":"DigitalNinja00/CVE-2018-1335","title":"DigitalNinja00/CVE-2018-1335","date":"2024-06-06","url":"https://github.com/DigitalNinja00/CVE-2018-1335"},{"source":"pocgithub","id":"N0b1e6/CVE-2018-1335-Python3","title":"N0b1e6/CVE-2018-1335-Python3","date":"2020-02-11","url":"https://github.com/N0b1e6/CVE-2018-1335-Python3"},{"source":"pocgithub","id":"SkyBlueEternal/CVE-2018-1335-EXP-GUI","title":"SkyBlueEternal/CVE-2018-1335-EXP-GUI","date":"2019-03-20","url":"https://github.com/SkyBlueEternal/CVE-2018-1335-EXP-GUI"},{"source":"pocgithub","id":"canumay/cve-2018-1335","title":"canumay/cve-2018-1335","date":"2021-01-18","url":"https://github.com/canumay/cve-2018-1335"},{"source":"pocgithub","id":"siramk/CVE-2018-1335","title":"siramk/CVE-2018-1335","date":"2021-03-26","url":"https://github.com/siramk/CVE-2018-1335"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.tika:tika-core","fixed_in":["1.18"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:11","package":"tika","fixed_in":["1.18-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.tika:tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7"},{"fixed":"1.18"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.tika:tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7"},{"fixed":"1.18"}]}],"versions":["1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.17","1.7","1.8","1.9"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-2"]}],"products":[{"vendor":"apache","product":"tika"},{"vendor":"apache software foundation","product":"apache tika"}],"references":[{"url":"https://lists.apache.org/thread.html/b3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca%40%3Cdev.tika.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/104001","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://www.exploit-db.com/exploits/46540/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/153864/Apache-Tika-1.17-Header-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3140","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1335","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9r24-gp44-h3pm","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/b3ed4432380af767effd4c6f27665cc7b2686acccbefeb9f55851dca@%3Cdev.tika.apache.org%3E","tags":["web","report"]},{"url":"https://www.exploit-db.com/exploits/46540","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1335","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1335","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2018/04/25/8","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1335","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-1335","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:00:00Z","modified":"2024-09-17T03:58:34.667Z","updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-0566","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:00:00Z","modified":"2024-09-17T03:58:34Z","updated_at":"2026-11-03T00:28:27.555678Z"}],"ghsa":[{"id":"GHSA-9r24-gp44-h3pm","title":"Command injection in org.apache.tika:tika-core","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-10-17T15:43:43Z","modified":"2024-04-19T19:47:16Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:37:43.62603Z"}],"nvd":[{"id":"CVE-2018-1335","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:29:00.297Z","modified":"2026-06-17T01:51:02.73Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:26.098615Z"}],"osv":[{"id":"CVE-2018-1335","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:29:00.297Z","modified":"2026-10-24T10:30:31.674692881Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-1335","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:29:00.297Z","modified":"2026-08-04T06:04:27.252216424Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"GHSA-9r24-gp44-h3pm","title":"Command injection in org.apache.tika:tika-core","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-10-17T15:43:43Z","modified":"2024-12-01T05:29:25.932104Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:44.225359Z"},{"id":"UBUNTU-CVE-2018-1335","description":"From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","status":"published","published":"2018-04-25T21:29:00Z","modified":"2026-10-17T12:54:33.750767028Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"}]}}