Lucene search
K

17 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:50 a.m.22 views

Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.9AI score0.01357EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/05/17 4:50 a.m.25 views

GHSA-6CPJ-3G83-Q2J4 Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.3AI score0.01357EPSS
Exploits0References8
OSV
OSV
added 2022/05/17 4:39 a.m.27 views

GHSA-998J-J6V9-5846 Apache Solr UpdateRequestHandler for XML resolves XML External Entities

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.3AI score0.11391EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2022/05/17 4:39 a.m.25 views

Apache Solr UpdateRequestHandler for XML resolves XML External Entities

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.4AI score0.11391EPSS
Exploits0References10Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/02/13 12:0 a.m.33 views

Apache Solr < 5.0 Multiple XXE

Binary data 9943.prm...

7.5CVSS6.7AI score0.11391EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2014/01/15 5:45 p.m.3 views

Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.8AI score0.01357EPSS
Exploits0References4
NVD
NVD
added 2013/12/07 9:55 p.m.15 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.01357EPSS
Exploits0References4
Prion
Prion
added 2013/12/07 9:55 p.m.22 views

Xxe

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS7.2AI score0.11391EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2013/12/07 9:0 p.m.31 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.01357EPSS
Exploits0
Cvelist
Cvelist
added 2013/12/07 9:0 p.m.18 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

6.4AI score0.01357EPSS
Exploits0References4
CVE
CVE
added 2013/12/07 9:0 p.m.111 views

CVE-2012-6612

CVE-2012-6612 describes an XXE-type vulnerability in Apache Solr where the UpdateRequestHandler (for XSLT) or XPathEntityProcessor prior to Solr 4.1 could process XML data containing external entity declarations combined with an entity reference, enabling remote impact. Connected advisories (GHSA...

7.5CVSS6.6AI score0.01357EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2013/12/07 8:55 p.m.15 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.5AI score0.11391EPSS
Exploits0References7
Prion
Prion
added 2013/12/07 8:55 p.m.21 views

Xxe

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.8AI score0.11391EPSS
Exploits0References7Affected Software1
UbuntuCve
UbuntuCve
added 2013/12/07 8:55 p.m.26 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS5.8AI score0.11391EPSS
Exploits0References3
CVE
CVE
added 2013/12/07 8:0 p.m.110 views

CVE-2013-6407

CVE-2013-6407 (Apache Solr; Lucene-Solr) : The UpdateRequestHandler for XML in Solr before 4.1 is vulnerable to XML External Entity (XXE). A crafted XML with an external entity declaration and an entity reference can cause information disclosure. Affected: Solr/Lucene-Solr prior to 4.1. Root caus...

6.4CVSS6.6AI score0.11391EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2013/12/07 8:0 p.m.27 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.5AI score0.11391EPSS
Exploits0
Cvelist
Cvelist
added 2013/12/07 8:0 p.m.21 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.5AI score0.11391EPSS
Exploits0References7
Rows per page
Query Builder