CVE-2018-8026

This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion XXE in Solr config files currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file. In addition, Xinclude functionality provided in these config files is als...

PT-2018-18391

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 6.0.0 through 6.6.4 Apache Solr versions 7.0.0 through 7.3.1 Description: The issue relates to an XML external entity expansion XXE in Solr config files, such as currency.xml, enumsConfig.xml, and TIKA parsecontext config...