Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-RC9V-H28F-JCMF There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files

🗓️ 17 Oct 2018 19:56:04Reported by GoogleType 
osv
 osv🔗 osv.dev👁 2 Views

XXE and XInclude in Solr config files allow reading local files; upgrade to Solr 6.6.4 or 7.3.1.

Related
Refs
ReporterTitlePublishedViews
Family
CNVD		Apache Solr XML External Entity Injection Vulnerability (CNVD-2018-10076)
23 May 201800:00
–cnvd
Check Point Advisories		Apache Solr XML External Entity Expansion Information Disclosure (CVE-2018-8010)
19 Feb 201900:00
–checkpoint_advisories
CVE		CVE-2018-8010
21 May 201819:00
–cve
Cvelist		CVE-2018-8010
21 May 201819:00
–cvelist
Debian CVE		CVE-2018-8010
21 May 201819:00
–debiancve
IBM Security Bulletins		Security Bulletin: A vulnerability in Apache Solr (lucene) affects IBM InfoSphere Information Server
13 Jul 201823:24
–ibm
EUVD		EUVD-2018-0681
7 Oct 202500:30
–euvd
Github Security Blog		There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
17 Oct 201819:56
–github
NVD		CVE-2018-8010
21 May 201819:29
–nvd
OpenVAS		Apache Solr 6.x < 6.6.4 and 7.x < 7.3.1 XXE Vulnerability (SOLR-12316) - Windows
22 May 201800:00
–openvas
Rows per page
SourceLink
nvdwww.nvd.nist.gov/vuln/detail/CVE-2018-8010
githubwww.github.com/apache/lucene-solr/commit/4ba409e0ff3dc38aad88f7b7ad69a76325272b8
githubwww.github.com/apache/lucene-solr/commit/6c4e45e28494d4d4d04fb89852d18c86fa3d5f8
githubwww.github.com/apache/lucene-solr/commit/6d082d5743dee7e08a86b3f2ef03bc025112512
githubwww.github.com/apache/lucene-solr/commit/96f079b4b47eaadff65c7aaf0e5bafe68e30ec3
githubwww.github.com/advisories/GHSA-rc9v-h28f-jcmf
issueswww.issues.apache.org/jira/browse/SOLR-12316
listswww.lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
mail-archiveswww.mail-archives.apache.org/mod_mbox/www-announce/201805.mbox/%3C08a801d3f0f9%24df46d300%249dd47900%24%40apache.org%3E
securityfocuswww.securityfocus.com/bid/104239
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Mar 2024 23:01Current
6Medium risk
Vulners AI Score6
CVSS 35.5
EPSS0.03917
xml external entitysolr config filessolr vulnerabilityupgrade solr
2