1403 matches found
DRUPAL-CONTRIB-2025-046
This module provides support for creating searches using the Apache Solr search engine and the Search API Drupal module. The module doesn't sufficiently protect certain routes from CSRF attacks. This vulnerability is mitigated by the fact that a site admin would have to perform further steps afte...
Search API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046
This module provides support for creating searches using the Apache Solr search engine and the Search API Drupal module. The module doesn't sufficiently protect certain routes from CSRF attacks. This vulnerability is mitigated by the fact that a site admin would have to perform further steps afte...
PT-2025-17661 · Drupal · Drupal Search Api Solr
Name of the Vulnerable Software and Affected Versions: Drupal Search API Solr versions 0.0.0 through 4.3.8 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on behalf of another...
Drupal Search API Solr module < 4.3.9 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Search API Solr versions 4.3.9...
Drupal Search API Solr 安全漏洞
Drupal Search API Solr is a module plugin in the Drupal content management system from the Drupal community. A security vulnerability exists in Drupal Search API Solr versions prior to 4.3.9 that stems from vulnerability to cross-site request forgery attacks...
Security Bulletin: Vulnerability in Apache Solr (lucene), Apache ZooKeeper and Logstash affect IBM Operations Analytics - Log Analysis (CVE-2024-9823, CVE-2024-47554)
Summary There is a potential denial of service with Apache Commons IO, Eclipse Jetty that affect Apache Solr lucene, Apache ZooKeeper and Logstash used by IBM Operations Analytics - Log Analysis Vulnerability Details CVEID:CVE-2024-9823 DESCRIPTION: There exists a security vulnerability in Jetty'...
Security Bulletin: Vulnerabilities in Apache Solr (lucene) affect IBM Operations Analytics - Log Analysis (CVE-2025-24814, CVE-2024-52012)
Summary There are vulnerabilities in privilege escalation and arbitrary filepath write-access that affect Apache Solr used by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID:CVE-2025-24814 DESCRIPTION: Core creation allows users to replace "trusted" configset files with...
Security Bulletin: Multiple vulnerabilities in Apache Solr (lucene) affects IBM Operations Analytics - Log Analysis (CVE-2023-50386, CVE-2023-50298, CVE-2023-50292, CVE-2023-50291)
Summary There are vulnerabilities in backup/restore APIs, Solr streaming expressions, and Apache Solr schema designer that affect Apache Solr used by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID:CVE-2023-50386 DESCRIPTION: Improper Control of Dynamically-Managed Code...
The vulnerability of the “FileSystemConfigSetService” component of the Apache Solr search server, which allows a hacker to load malicious code.
The vulnerability of the “FileSystemConfigSetService” component of the Apache Solr search server is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to load malicious code remotely...
CVE-2025-3099
The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to upda...
WordPress plugin Advanced Search by My Solr Server 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2025-14477 · WordPress · Advanced Search By My Solr Server
Name of the Vulnerable Software and Affected Versions: Advanced Search by My Solr Server plugin for WordPress versions up to, and including, 2.0.5 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This...
CVE-2022-25869 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-PRC3-VJFX-VHM9 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-PRC3-VJFX-VHM9 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2022-25869 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2024-21490 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-4W4V-5HC9-XRR2 vulnerabilities
Vulnerabilities for packages: solr...