org.craftercms:crafter-studio2-engine (>=2.5.3, <=2.5.9), org.craftercms:crafter-studio2-studio (>=2.5.3, <=2.5.9) +1 more potentially affected by CVE-2015-8796 via org.apache.solr:solr (4.10.4)

org.apache.solr:solr MAVEN version 4.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr and may be impacted: - org.craftercms:crafter-studio2-engine =2.5.3, =2.5.3, =2.5.9 - org.vivoweb:vitro-solr 1.10.0 Source cves: CVE-2015-879...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

CVE-2015-8796

CVE-2015-8796 is an XSS in Apache Solr's Admin UI (webapp/web/js/scripts/schema-browser.js) that allows a remote attacker to inject arbitrary web script or HTML via a crafted schema-browse URL. The vulnerability is stated for Solr before version 5.3. Documents provide the affected component and t...