Advisoriesby IbisApache SolrGHSA-45w3-2hvv-pfxq
XML Injection in Apache Solr
Fix: upgrade to 4.3.1 or later
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| org.apache.solr:solr-core Maven | < 4.3.1 | 4.3.1 |
Details and references
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-91
- Also known as
- CVE-2013-6408
- nvd.nist.gov/vuln/detail/CVE-2013-6408
- github.com/apache/lucene-solr/commit/7239a57a51ea0f4d05dd330ce5e15e4f72f72747
- github.com/apache/lucene-solr
- issues.apache.org/jira/browse/SOLR-4881
- rhn.redhat.com/errata/RHSA-2013-1844.html
- rhn.redhat.com/errata/RHSA-2014-0029.html
- svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup
- www.openwall.com/lists/oss-security/2013/11/29/2
More Apache Solr advisories
All Apache Solr
Improper Restriction of XML External Entity Reference in Apache SolrCVE-2012-6612fixed in 4.1.0Apache Solr UpdateRequestHandler for XML resolves XML External EntitiesCVE-2013-6407fixed in 4.1.0Improper Limitation of a Pathname to a Restricted Directory in Apache SolrCVE-2013-6397fixed in 4.6.0Improper Neutralization of Input During Web Page Generation in Apache SolrCVE-2015-8795fixed in 5.1.0Improper Neutralization of Input During Web Page Generation in Apache SolrCVE-2015-8797fixed in 5.3.1Apache Solr insecure inter-node communicationCVE-2017-7660fixed in 5.5.5 +1