The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote
    attackers to have an unspecified impact via XML data containing an external entity declaration in
    conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors
    than CVE-2013-6407. (CVE-2012-6612)

Apache Solr 4.0.0 allows remote attackers to have an unspecified impact via the 'UpdateRequestHandler' for XSLT or 'XPathEntityProcessor', by injecting XML data containing an external entity declaration in conjunction with a valid entity reference, related to an XML External Entity (XXE) issue.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

Versions of Apache Solr prior to 5.0 are affected by multiple vulnerabilities :

 - A XXE injection flaw exists in 'UpdateRequestHandler' that is triggered during the parsing of XML data. The issue is due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. By sending specially crafted XML data, a remote attacker can gain access to arbitrary files. (CVE-2012-6612, CVE-2013-6407)
 - A XXE injection flaw in 'DocumentAnalysisRequestHandler' exists that is triggered during the parsing of XML data. The issue is due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. By sending specially crafted XML data, a remote attacker can gain access to arbitrary files. (CVE-2013-6408)

The version of Apache Solr running on the remote web server is affected by multiple XML external entity injection vulnerabilities because the XML parser accepts XML data containing external entity declarations from untrusted sources. A remote, unauthenticated attacker can exploit this flaw to gain access to arbitrary files or to cause a denial of service condition.

ID	Name	Product	Family	Type	Severity
411377	SCA: security update for org.apache.solr:solr-core (GHSA-6cpj-3g83-q2j4)	Tenable Cloud Security	SCA Checks	Local	high
411377	SCA: security update for org.apache.solr:solr-core (GHSA-6cpj-3g83-q2j4)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
98886	Apache Solr 4.0.0 XML External Entity	Web App Scanning	Component Vulnerability	Version Based	high
9943	Apache Solr < 5.0 Multiple XXE	Nessus Network Monitor	CGI		medium
71844	Apache Solr < 4.1.0 Multiple XML External Entity Injections	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2012-6612

high

Tenable Plugins

high

high

high

medium

high