Lucene search
+L

23 matches found

OSV
OSV
•added 2022/05/17 4:50 a.m.•100 views

GHSA-6CPJ-3G83-Q2J4 Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.3AI score0.10075EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/17 4:50 a.m.•41 views

Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.9AI score0.10075EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/17 4:39 a.m.•37 views

Apache Solr UpdateRequestHandler for XML resolves XML External Entities

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.4AI score0.114EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2022/05/17 4:39 a.m.•38 views

GHSA-998J-J6V9-5846 Apache Solr UpdateRequestHandler for XML resolves XML External Entities

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.3AI score0.114EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2017/02/13 12:00 a.m.•50 views

Apache Solr < 5.0 Multiple XXE

Binary data 9943.prm...

7.5CVSS6.7AI score0.114EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2014/01/15 5:45 p.m.•17 views

Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.8AI score0.10075EPSS
SaveExploits0References4
NVD
NVD
•added 2013/12/07 9:55 p.m.•47 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.10075EPSS
SaveExploits0References4
Prion
Prion
•added 2013/12/07 9:55 p.m.•38 views

Xxe

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS7.2AI score0.114EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2013/12/07 9:00 p.m.•51 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

6.4AI score0.10075EPSS
SaveExploits0References4
Mend
Mend
•added 2013/12/07 9:00 p.m.•2 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS0.10075EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2013/12/07 9:00 p.m.•73 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.10075EPSS
SaveExploits0
CVE
CVE
•added 2013/12/07 9:00 p.m.•141 views

CVE-2012-6612

CVE-2012-6612 describes an XXE-type vulnerability in Apache Solr where the UpdateRequestHandler (for XSLT) or XPathEntityProcessor prior to Solr 4.1 could process XML data containing external entity declarations combined with an entity reference, enabling remote impact. Connected advisories (GHSA...

7.5CVSS6.6AI score0.10075EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2013/12/07 8:55 p.m.•29 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.5AI score0.114EPSS
SaveExploits0References7
Prion
Prion
•added 2013/12/07 8:55 p.m.•36 views

Xxe

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.8AI score0.114EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
•added 2013/12/07 8:55 p.m.•41 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS5.8AI score0.114EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2013/12/07 8:00 p.m.•55 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.5AI score0.114EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2013/12/07 8:00 p.m.•68 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.4CVSS6.5AI score0.114EPSS
SaveExploits0
Mend
Mend
•added 2013/12/07 8:00 p.m.•1 views

CVE-2013-6407

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

6.9CVSS0.114EPSS
SaveExploits0References10
CVE
CVE
•added 2013/12/07 8:00 p.m.•144 views

CVE-2013-6407

CVE-2013-6407 (Apache Solr; Lucene-Solr) : The UpdateRequestHandler for XML in Solr before 4.1 is vulnerable to XML External Entity (XXE). A crafted XML with an external entity declaration and an entity reference can cause information disclosure. Affected: Solr/Lucene-Solr prior to 4.1. Root caus...

6.4CVSS6.6AI score0.114EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2013/12/07 12:00 a.m.•2 views

PT-2013-2047

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 4.1 Description The issue affects the UpdateRequestHandler for XSLT or XPathEntityProcessor, allowing remote attackers to have an impact via XML data containing an external entity declaration in conjunction with a...

7.5CVSS0.10075EPSS
SaveExploits0References15
Rows per page
Query Builder