CVE-2022-30126

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-301278.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-301288.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-301298.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2022-30139.8A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the filCVE-2022-301303.3.NET Framework Denial of Service VulnerabilityCVE-2022-301317.8Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityCVE-2022-301327.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2022-301339.8Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityCVE-2022-301346.5Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-301357.8Windows Media Center Elevation of Privilege VulnerabilityCVE-2022-301369.8Windows Network File System Remote Code Execution VulnerabilityCVE-2022-301376.7Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker container
CVE-2022-30126: Medium severity, CVSS 5.5 | Vulnix