Lucene search
+L

2 matches found

Veracode
Veracode
added 2019/01/15 9:19 a.m.44 views

Remote Code Execution (RCE)

lucene-queryparser is vulnerable to remote code execution. This is possible through the use of an XML external entity expansion XXE attack and the Config API with add-listener command...

9.8CVSS9.6AI score0.91896EPSS
SaveExploits12References31Affected Software14
Veracode
Veracode
added 2017/10/16 12:44 a.m.43 views

Remote Code Execution (RCE)

lucene-queryparser is vulnerable to remote code execution RCE. This is possible through the use of an XML external entity expansion XXE attack and the Config API with add-listener command...

9.8CVSS9.6AI score0.91896EPSS
SaveExploits12References30Affected Software3
Rows per page
Query Builder