PT-2013-2047

CVE-2012-6612

Publicado

2013-12-07

Atualizado

2022-05-17

Descrição por

CVSS 2.0

7.5

Alta

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 4.1

Description The issue affects the UpdateRequestHandler for XSLT or XPathEntityProcessor, allowing remote attackers to have an impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Recommendations For Apache Solr versions prior to 4.1, update to version 4.1 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-611: Improper Restriction of XML External Entity Reference

Identificadores relacionados

CVE-2012-6612

GHSA-6CPJ-3G83-Q2J4