CVE-2015-5506: Exposure of Sensitive Information to an Unauthorized Actor

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

PT-2015-6958

Name of the Vulnerable Software and Affected Versions Apache Solr Real-Time module versions 7.x-1.x before 7.x-1.2 for Drupal Description The issue allows remote attackers to obtain information about unpublished content via a search because it does not check the status of an entity when indexing...

Apache Solr Real-Time - Critical - Access Bypass - SA-CONTRIB-2015-119

This module allows content-changes to be committed to Apache Solr in real-time. The module doesn't check the status of an entity being indexed which means that unpublished content will get indexed by Solr and the title and partial content may be exposed to any user who has permission to search si...