org.craftercms:crafter-studio2-engine (>=2.5.3 <=2.5.9), org.craftercms:crafter-studio2-studio (>=2.5.3 <=2.5.9) +2 more potentially affected by CVE-2015-8796 via org.apache.solr:solr (>=3.3.0 <=4.7.2)

org.apache.solr:solr MAVEN version =3.3.0, =2.5.3, =2.5.3, =3.3.0.0, =1.9.0, =1.10.0-beta2 Source cves: CVE-2015-8796 Source advisory: OSV:GHSA-4FXW-G29W-R8MX...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

CVE-2015-8796

CVE-2015-8796 is an XSS in Apache Solr's Admin UI (webapp/web/js/scripts/schema-browser.js) that allows a remote attacker to inject arbitrary web script or HTML via a crafted schema-browse URL. The vulnerability is stated for Solr before version 5.3. Documents provide the affected component and t...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...