Lucene search
+L

1 matches found

OSV
OSV
added 2017/11/06 8:22 a.m.13 views

MGASA-2017-0403 Updated lucene packages fix security vulnerability

It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...

9.8CVSS9.3AI score0.91896EPSS
SaveExploits12References3
Rows per page
Query Builder