GHSA-xc7q-q62f-wcvr

Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-6289

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	apache-solr-for-typo3/solr	< 2.8.3	2.8.3

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-6289 advisory
https://github.com/TYPO3-Solr/ext-solr/commit/57e3b06b498668e093b9b86f32f7509d12d6ae4e web
https://github.com/TYPO3-Solr/ext-solr/commit/7ed1e9fc03f2036d80a416178493da72c620f7e9 web
https://github.com/TYPO3-Solr/ext-solr package
http://secunia.com/advisories/54978 web
http://typo3.org/extensions/repository/view/solr web
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009 web
http://www.securityfocus.com/bid/62674 web