GitHub Advisoryadvisory · Maven
GHSA-998j-j6v9-5846 Apache Solr UpdateRequestHandler for XML resolves XML External Entities
MEDIUM
Official page ↗
- Aliases
- CVE-2013-6407
- Ecosystem
- Maven
- Packages
- org.apache.solr:solr-core
- Severity
- Moderate
- Weaknesses
- CWE-611
- Reviewed
- 2022-11-22
Affected packages
• Maven org.apache.solr:solr-core: < 4.1.0 → fixed in 4.1.0
Description
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Related
Alias · CVE (1)
- CVE-2013-6407 The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an… vulnerability
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-6407 advisory
- https://github.com/apache/lucene-solr/commit/f230486ce6707762c1a6e81655d0fac52887906d web
- https://github.com/apache/lucene-solr package
- https://issues.apache.org/jira/browse/SOLR-3895 web
- http://rhn.redhat.com/errata/RHSA-2013-1844.html web
- http://rhn.redhat.com/errata/RHSA-2014-0029.html web
- http://secunia.com/advisories/55542 web
- http://secunia.com/advisories/59372 web
- http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup web
- http://www.openwall.com/lists/oss-security/2013/11/29/2 web