Apache Tika versions 0.10 through 1.12 suffer from an XXE injection vulnerability. Continue reading...