GitHub Advisoryadvisory · Packagist

GHSA-xc7q-q62f-wcvr Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)

MEDIUM Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2013-6289
Ecosystem
Packagist
Packages
apache-solr-for-typo3/solr
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-08-29

Affected packages

• Packagist apache-solr-for-typo3/solr: < 2.8.3 → fixed in 2.8.3

Description

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-6289 Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References