Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-23483

CVE-2025-54988 is impacting tika-core

    XMLWordPrintable

Details

    • Unknown
    • N/A
    • N/A

    Description

      See https://app.opencve.io/cve/CVE-2025-54988

      All versions of tika-core between 1.13 and 3.2.1 are affected. So all supported versions of XWiki are impacted.
      The only patched version is 3.2.3. But currently we are unable to upgrade from tika 2.x to tika 3.x, see XWIKI-22595

      Proposed solution:

      1. deploy a patched version of tika 2.9.4 in our external repository (https://maven.xwiki.org/externals) (see CVE-2025-5498-1.patch )
      2. use the patched version for all versions of xwiki

      Attachments

        Issue Links

          links to

          Web Link GitHub advisory

          Activity

            People

              MichaelHamann Michael Hamann
              mleduc Manuel Leduc
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: