The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Apache Solr versions 3.6.0 < 4.1.0 allows remote attackers to have an unspecified impact via the 'UpdateRequestHandler' by injecting XML data containing an external entity declaration in conjunction with a valid entity reference, related to an XML External Entity (XXE) issue

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

Versions of Apache Solr prior to 5.0 are affected by multiple vulnerabilities :

 - A XXE injection flaw exists in 'UpdateRequestHandler' that is triggered during the parsing of XML data. The issue is due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. By sending specially crafted XML data, a remote attacker can gain access to arbitrary files. (CVE-2012-6612, CVE-2013-6407)
 - A XXE injection flaw in 'DocumentAnalysisRequestHandler' exists that is triggered during the parsing of XML data. The issue is due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. By sending specially crafted XML data, a remote attacker can gain access to arbitrary files. (CVE-2013-6408)

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution.

The version of Apache Solr running on the remote web server is affected by multiple XML external entity injection vulnerabilities because the XML parser accepts XML data containing external entity declarations from untrusted sources. A remote, unauthenticated attacker can exploit this flaw to gain access to arbitrary files or to cause a denial of service condition.

ID	Name	Product	Family	Severity
98888	Apache Solr 3.6.0 < 4.1.0 XML External Entity	Web App Scanning	Component Vulnerability	medium
9943	Apache Solr < 5.0 Multiple XXE	Nessus Network Monitor	CGI	medium
76091	Debian DSA-2963-1 : lucene-solr - security update	Nessus	Debian Local Security Checks	medium
71844	Apache Solr < 4.1.0 Multiple XML External Entity Injections	Nessus	CGI abuses	high

Detections

Analytics

CVE-2013-6407

medium

Tenable Plugins

medium

medium

medium

high