Lucene search
RedhatCVELIST:CVE-2013-6408HistoryDec 07, 2013 - 8:00 p.m.
CVE-2013-6408
2013-12-0720:00:00
redhat
raw.githubusercontent.com
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.
Related
nessus
nessus
Apache Solr < 4.3.1 XML External Entity Injection
2014-01-07 00:00:00
Debian DSA-2963-1 : lucene-solr - security update
2014-06-18 00:00:00
Apache Solr < 5.0 Multiple XXE
2017-02-13 00:00:00
ibm
ibm
ubuntucve
ubuntucve
debiancve
debiancve
cve
cve
osv
osv
XML Injection in Apache Solr
2022-05-17 04:39:49
lucene-solr - security update
2014-06-17 00:00:00
Apache Solr UpdateRequestHandler for XML resolves XML External Entities
2022-05-17 04:39:49
github
github
XML Injection in Apache Solr
2022-05-17 04:39:49
Apache Solr UpdateRequestHandler for XML resolves XML External Entities
2022-05-17 04:39:49
Improper Restriction of XML External Entity Reference in Apache Solr
2022-05-17 04:50:16
securityvulns
securityvulns
Vulnerabilities in Apache Solr < 4.6.0
2014-01-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 2963-1 (lucene-solr - security update)
2014-06-17 00:00:00
Debian: Security Advisory (DSA-2963-1)
2014-06-16 00:00:00
debian
debian
[SECURITY] [DSA 2963-1] lucene-solr security update
2014-06-17 19:32:28
cvelist
cvelist
CVE-2013-6407
2013-12-07 20:00:00
CVE-2012-6612
2013-12-07 21:00:00
redhat
redhat
(RHSA-2014:0029) Important: Red Hat JBoss Data Grid 6.2.0 update
2014-01-15 17:38:16