Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:50 a.m.22 views

Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS5.9AI score0.01357EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/05/17 4:50 a.m.25 views

GHSA-6CPJ-3G83-Q2J4 Improper Restriction of XML External Entity Reference in Apache Solr

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.3AI score0.01357EPSS
Exploits0References8
NVD
NVD
added 2013/12/07 9:55 p.m.15 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.01357EPSS
Exploits0References4
Prion
Prion
added 2013/12/07 9:55 p.m.23 views

Xxe

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS7.2AI score0.11391EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2013/12/07 9:0 p.m.31 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

7.5CVSS6.5AI score0.01357EPSS
Exploits0
Cvelist
Cvelist
added 2013/12/07 9:0 p.m.18 views

CVE-2012-6612

The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...

6.4AI score0.01357EPSS
Exploits0References4
CVE
CVE
added 2013/12/07 9:0 p.m.112 views

CVE-2012-6612

CVE-2012-6612 describes an XXE-type vulnerability in Apache Solr where the UpdateRequestHandler (for XSLT) or XPathEntityProcessor prior to Solr 4.1 could process XML data containing external entity declarations combined with an entity reference, enabling remote impact. Connected advisories (GHSA...

7.5CVSS6.6AI score0.01357EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder