description: In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.
problem types: Denial of Service via XML Entity Expansion
affected:
{
product: Apache Tika
vendor: Apache Software Foundation
versions:
status: affected, version: 0.1 to 1.18
}