Apache Solr < 4.6.0 'SolrResourceLoader' Directory Traversal

The version of Apache Solr running on the remote web server is affected by a directory traversal vulnerability because the 'SolrResourceLoader' class fails to restrict access to the loading of specially crafted XLS stylesheets and velocity templates. A remote, unauthenticated attacker can exploit...

CVE-2013-6397

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...

CVE-2013-6397

Apache Solr (SolrResourceLoader) is vulnerable to a directory traversal via the tr parameter in solr/select/ when wt is XSLT, allowing reading of arbitrary files. Affected versions are Solr up to 4.5.x (before 4.6.0); the issue is caused by insufficient path validation and can be combined with an...