CVE-2026-55442

Name of the Vulnerable Software and Affected Versions Goobi viewer versions 23.03 through 26.04

Description A flaw exists in the shared sanitizer function cleanUpQuery() within SolrTools, which is designed to strip Solr local-parameter syntax ({!...}) from user-supplied query strings. The regular expression used can be bypassed by wrapping the local parameter in a second pair of curly braces ({{!...}}), allowing the inner {!...} to remain intact and be forwarded as a valid Solr local parameter. This issue affects any endpoint that routes user input through the cleanUpQuery() function. Additionally, a related bare-!join rewrap path is present.

Recommendations Update to version 26.05. As a temporary workaround, restrict user input that is processed by the cleanUpQuery() function to prevent the use of curly braces.