CVE-2025-54988 | Apache Tika up to 3.2.1 XFA File xml external entity reference

A vulnerability labeled as problematic has been found in Apache Tika up to 3.2.1. The affected element is an unknown function of the component XFA File Handler. Such manipulation leads to xml external entity reference.

This vulnerability is documented as CVE-2025-54988. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.