Lucene search
+L

8 matches found

OSV
OSV
•added 2022/05/17 4:50 a.m.•100 views

GHSA-6CPJ-3G83-Q2J4 Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.3AI score0.10075EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/17 4:50 a.m.•41 views

Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.9AI score0.10075EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2013/12/07 9:55 p.m.•47 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.10075EPSS
SaveExploits0References4
Prion
Prion
•added 2013/12/07 9:55 p.m.•38 views

Xxe

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS7.2AI score0.114EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2013/12/07 9:00 p.m.•72 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.10075EPSS
SaveExploits0
CVE
CVE
•added 2013/12/07 9:00 p.m.•139 views

CVE-2012-6612

CVE-2012-6612 describes an XXE-type vulnerability in Apache Solr where the UpdateRequestHandler (for XSLT) or XPathEntityProcessor prior to Solr 4.1 could process XML data containing external entity declarations combined with an entity reference, enabling remote impact. Connected advisories (GHSA...

7.5CVSS6.6AI score0.10075EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2013/12/07 9:00 p.m.•50 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

6.4AI score0.10075EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/12/07 12:00 a.m.•4 views

CVE-2012-6612: Undefined Security Weakness

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.9AI score0.10075EPSS
SaveExploits0References1
Rows per page
Query Builder