org.vivoweb:vitro-solr (>=1.9.0-alpha-1, <=1.10.0-beta2) potentially affected by CVE-2014-3628 via org.apache.solr:solr (4.7.2)

org.apache.solr:solr MAVEN version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr and may be impacted: - org.vivoweb:vitro-solr =1.9.0-alpha-1, =1.10.0-beta2 Source cves: CVE-2014-3628 Source advisory: OSV:GHSA-WGW2-GW4V-9W4...

org.vivoweb:vitro-solr (>=1.9.0-alpha-1, <=1.10.0-beta2) potentially affected by CVE-2014-3628 via org.apache.solr:solr (4.7.2)

org.apache.solr:solr MAVEN version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr and may be impacted: - org.vivoweb:vitro-solr =1.9.0-alpha-1, =1.10.0-beta2 Source cves: CVE-2014-3628 Source advisory: GHSA-WGW2-GW4V-9W4J...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...