Lucene search
+L

2 matches found

OSV
OSV
•added 2017/11/06 8:22 a.m.•17 views

MGASA-2017-0403 Updated lucene packages fix security vulnerability

It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...

9.8CVSS7.7AI score0.91896EPSS
SaveExploits13References3
Mageia
Mageia
•added 2017/11/06 8:22 a.m.•52 views

Updated lucene packages fix security vulnerability

It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...

9.8CVSS7.8AI score0.91896EPSS
SaveExploits13References2
Rows per page
Query Builder