Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Solr Admin UI 跨站脚本漏洞
Vulnerability Description
Apache Solr是美国阿帕奇（Apache）软件基金会的一款基于Lucene（一个全文检索引擎的架构）的搜索服务器，它支持层面搜索、垂直搜索、高亮显示搜索结果、多种输出格式等。Admin UI是其中的一个管理员和程序员管理Solr配置的Web界面。 Apache Solr 5.3之前版本的Admin UI中的webapp/web/js/scripts/schema-browser.js文件中存在跨站脚本漏洞。远程攻击者可借助特制的schema-browse URL利用该漏洞注入任意Web脚本或HTM
CVSS Information
N/A
Vulnerability Type
N/A