Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)

MEDIO 4.3CVE-2013-6289 · GHSA-xc7q-q62f-wcvr · Published 28/10/2013 · updated 17/06/2026

In breve

CVE-2013-6289 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda apache-solr-for-typo3/solr, apache solr (ingo renner).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.6% delle vulnerabilità.
Correzione: aggiornare a 2.8.3 o successiva.

Package	Affected versions	Patched versions
apache-solr-for-typo3/solr Packagist	`< 2.8.3`	`2.8.3`
apache solr ingo_renner	`= 1.0= 1.3.0= 1.3.1= 2.1.0= 2.2.0= 2.2.1= 2.2.2= 2.8.0= 2.8.1≤ 2.8.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2013-6289 · ADVISORY
TYPO3-Solr/ext-solr commit 57e3b06 · WEB
TYPO3-Solr/ext-solr commit 7ed1e9f · WEB
TYPO3-Solr/ext-solr · PACKAGE
secunia.com/advisories/54978 · WEB
typo3.org/extensions/repository/view/solr · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009 · WEB
securityfocus.com/bid/62674 · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009

Altre vulnerabilità di apache-solr-for-typo3/solr

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apache-solr-for-typo3/solr

Packagist

< 2.8.3

2.8.3

apache solr

ingo_renner

= 1.0= 1.3.0= 1.3.1= 2.1.0= 2.2.0= 2.2.1= 2.2.2= 2.8.0= 2.8.1≤ 2.8.2

No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Altre vulnerabilità di apache-solr-for-typo3/solr

Vedi tutto →