Lucene search
+L

3 matches found

Packet Storm
Packet Storm
added 2017/10/18 12:0 a.m.666 views

Apache Solr 7.0.1 XXE Injection / Code Execution

First Vulnerability: XML External Entity Expansion deftype=xmlparser Lucene includes a query parser that is able to create the full-spectrum of Lucene queries, using an XML data structure. Starting from version 5.1 Solr supports "xml" query parser in the search query. The problem is that lucene x...

9.3AI score0.91896EPSS
SaveExploits12
Rows per page
Query Builder