Lucene search

K
githubGitHub Advisory DatabaseGHSA-998J-J6V9-5846
HistoryMay 17, 2022 - 4:39 a.m.

Apache Solr UpdateRequestHandler for XML resolves XML External Entities

2022-05-1704:39:49
CWE-611
GitHub Advisory Database
github.com
9

0.002 Low

EPSS

Percentile

61.5%

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CPENameOperatorVersion
org.apache.solr:solr-corelt4.1.0