Yair Hinkis

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A remote, unauthenticated attacker can exploit the way the extension handles the search query parameter passed to Apache Solr. Because advanced Solr query syntax—including wildcards, field selectors, and range queries—is not restricted, an attacker can use boolean- and range-based blind extraction techniques to enumerate indexed field names and extract their stored values. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.