CVE-2026-55442

The Goobi viewer web application (versions 23.03 to before 26.05 ) contains a vulnerability in the SolrTools.cleanUpQuery() shared sanitizer. The flaw allows for arbitrary Solr local-parameter injection because the regex used to strip local-parameter syntax ({!...}) can be bypassed by wrapping th...