GHSA-3PPH-2595-CGFH There is a XML external entity expansion (XXE) vulnerability in Apache Solr

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion XXE in the &dataConfig= parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the...

WS-2016-7097

In “Cloudera/Hue”, cdh5.5.0 to cdh5.9.3 and v3.6.0 to v3.11.0 are vulnerable against XSS injection due to an unescaped Solr Data...