3 matches found
Apache Solr 7.0.1 XXE Injection / Code Execution
First Vulnerability: XML External Entity Expansion deftype=xmlparser Lucene includes a query parser that is able to create the full-spectrum of Lucene queries, using an XML data structure. Starting from version 5.1 Solr supports "xml" query parser in the search query. The problem is that lucene x...
7.8AI score0.91896EPSS
SaveExploits13
20