Apache Solr < 4.6.0 'SolrResourceLoader' Directory Traversal

The version of Apache Solr running on the remote web server is affected by a directory traversal vulnerability because the 'SolrResourceLoader' class fails to restrict access to the loading of specially crafted XLS stylesheets and velocity templates. A remote, unauthenticated attacker can exploit...

CVE-2013-6397

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...

CVE-2013-6397

A directory traversal vulnerability exists in the SolrResourceLoader component of Apache Solr before version 4.6 . This flaw allows remote attackers to read arbitrary files by providing a .. (dot dot) or full pathname in the tr parameter of the solr/select/ endpoint, provided the response writer ...

CVE-2013-6397: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...