Apache Solr UpdateRequestHandler for XML resolves XML External Entities

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-6407 · ADVISORY
• apache/lucene-solr commit f230486 · WEB
• apache/lucene-solr · PACKAGE
• issues.apache.org/jira/browse/SOLR-3895 · WEB
• rhn.redhat.com/errata/RHSA-2013-1844.html · WEB
• rhn.redhat.com/errata/RHSA-2014-0029.html · WEB
• secunia.com/advisories/55542 · WEB
• secunia.com/advisories/59372 · WEB
• svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt · WEB
• openwall.com/lists/oss-security/2013/11/29/2 · WEB

org.apache.solr:solr-core のその他の脆弱性

• CVE-2026-44825緊急 9.8Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 …
• CVE-2026-22444高 7.1The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to ch…
• CVE-2026-22022高 8.2Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorize…
• CVE-2025-24814中 5.5Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemCon…
• CVE-2024-52012中 5.4Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, …