Debian/lucene-solr: high 7.5
This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be us
Action: Upgrade lucene-solr to 3.6.2+dfsg-12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.2+dfsg-12 | - |
Fixed versions
| 3.6.2+dfsg-12 |
Sources
- osv: DEBIAN-CVE-2018-1308#Debian:13/lucene-solr
- https://security-tracker.debian.org/tracker/CVE-2018-1308
published · modified · JSON