{"action":"Upgrade org.apache.solr:solr-core to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"org.apache.solr:solr-core","cve_ids":["CVE-2013-6407"],"ecosystem":"Maven","epss":0.114,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-998j-j6v9-5846","id":"tcs_01M5N8PM8KM60M4JQ16MD695WN","modified_at":"2024-11-30T05:51:57.985149Z","published_at":"2022-05-17T04:39:49Z","references":["https://osv.dev/vulnerability/GHSA-998j-j6v9-5846","https://nvd.nist.gov/vuln/detail/CVE-2013-6407","https://github.com/apache/lucene-solr/commit/f230486ce6707762c1a6e81655d0fac52887906d","https://github.com/apache/lucene-solr","https://issues.apache.org/jira/browse/SOLR-3895","http://rhn.redhat.com/errata/RHSA-2013-1844.html","http://rhn.redhat.com/errata/RHSA-2014-0029.html","http://secunia.com/advisories/55542","http://secunia.com/advisories/59372","http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup","http://www.openwall.com/lists/oss-security/2013/11/29/2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-998j-j6v9-5846","url":"https://osv.dev/vulnerability/GHSA-998j-j6v9-5846"}],"summary":"Apache Solr UpdateRequestHandler for XML resolves XML External Entities"}