CVE-2012-6612

Published: Dec 7, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.

Affected (3)

Products: Apache: Solr

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Solr	Up to 4.0.0
Apache Solr	Version 4.0.0 alpha
Apache Solr	Version 4.0.0 beta

References (8)

http://rhn.redhat.com/errata/RHSA-2013-1844.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2014-0029.html

Source: cve@mitre.org

http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup

Source: cve@mitre.org

https://issues.apache.org/jira/browse/SOLR-3895

Source: cve@mitre.org

Patch

http://rhn.redhat.com/errata/RHSA-2013-1844.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0029.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.apache.org/jira/browse/SOLR-3895

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.