GitHub Advisoryadvisory · Maven

GHSA-mx2h-hf7j-2x3p Improper Neutralization of Input During Web Page Generation in Apache Solr

MEDIUM Published 2022-05-17 Modified 2022-07-06 Official page ↗
Aliases
CVE-2015-8795
Ecosystem
Maven
Packages
org.apache.solr:solr-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-07-06

Affected packages

• Maven org.apache.solr:solr-core: < 5.1.0 → fixed in 5.1.0

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js.

Related

Alias · CVE (1)

  • CVE-2015-8795 Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References