CVE-2026-55444

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet RssResolver, GET /rss/ accepts the q and filterQuery parameters and concatenates them into Solr queries without validation. The servlet predates th...

CVE-2026-55465

The Goobi viewer web application (versions 22.04 to before 26.05 ) is vulnerable to Solr injection via an unauthenticated REST endpoint: GET /api/v1/index/{solrField}/spatial/search. The root cause is the direct concatenation of the user-supplied region query parameter into a Solr query string wi...

CVE-2026-55465 Goobi viewer: Solr injection via unvalidated region parameter in spatial search

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/solrField/spatial/search concatenates the user-supplied region query parameter directly into a Sol...

EUVD-2026-109061

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet RssResolver, GET /rss/ accepts the q and filterQuery parameters and concatenates them into Solr queries without validation. The servlet predates th...

PT-2026-122130

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet RssResolver, GET /rss/ accepts the q and filterQuery parameters and concatenates them into Solr queries without validation. The servlet predates th...

Zomato: Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.json

@zzzhacker13 identified a Solr Injection on the userid parameter at :/v2/leaderboardv2.json. Our team analyzed internally and found that only fq=injection was possible on the Solr endpoint, hence the Solr injection was of low impact since there was no way to escalate it to exfiltrate data, one...

Zomato: [www.zomato.com] Abusing LocalParams (city) to Inject SOLR query

Hi Team! ; I Found an limited SOLR Injection by Abusing LocalParams city in /webapi/searchapi.php, Therefore Please respect my decision to mark this report as Medium instead of High Based on the fact the code is Vulnerable even if it's hard to exploit. - Request adding single Backslash: http GET...