Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Solr XML外部实体注入漏洞
Vulnerability Description
Apache Solr是美国阿帕奇（Apache）软件基金会的一款基于Lucene（一个全文检索引擎的架构）的搜索服务器，它支持层面搜索、垂直搜索、高亮显示搜索结果、多种输出格式等。 Apache Solr 4.0及之前的版本中UpdateRequestHandler for XSLT的或XPathEntityProcessor类中存在XML外部实体注入漏洞。远程攻击者可借助包含外部实体声明和实体引用相结合的XML文档，利用该漏洞泄露敏感信息，也可能造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A