GHSA-45w3-2hvv-pfxq

XML Injection in Apache Solr

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-6408

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.apache.solr:solr-core	< 4.3.1	4.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-6408 advisory
https://github.com/apache/lucene-solr/commit/7239a57a51ea0f4d05dd330ce5e15e4f72f72747 web
https://github.com/apache/lucene-solr package
https://issues.apache.org/jira/browse/SOLR-4881 web
http://rhn.redhat.com/errata/RHSA-2013-1844.html web
http://rhn.redhat.com/errata/RHSA-2014-0029.html web
http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup web
http://www.openwall.com/lists/oss-security/2013/11/29/2 web