The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files.

The post Critical Apache Tika Vulnerability Leads to XXE Injection appeared first on SecurityWeek.