Vulnerabilites related to ingo_renner - apache_solr
Vulnerability from fkie_nvd
Published
2013-10-28 22:55
Modified
2025-04-11 00:51
Severity ?
Summary
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| ingo_renner | apache_solr | * | |
| ingo_renner | apache_solr | 1.0 | |
| ingo_renner | apache_solr | 1.3.0 | |
| ingo_renner | apache_solr | 1.3.1 | |
| ingo_renner | apache_solr | 2.1.0 | |
| ingo_renner | apache_solr | 2.2.0 | |
| ingo_renner | apache_solr | 2.2.1 | |
| ingo_renner | apache_solr | 2.2.2 | |
| ingo_renner | apache_solr | 2.8.0 | |
| ingo_renner | apache_solr | 2.8.1 | |
| typo3 | typo3 | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B9314F3A-5E7D-4FBE-A46C-35A6F3F3A7BA",
"versionEndIncluding": "2.8.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "211526D1-C48E-43C4-8E60-9A3DDABC53D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D844805F-73B6-461C-94DF-F2950AB4E270",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3E2C38DE-FF31-4CAC-8AE2-A596BFBC0621",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "83ECCAB7-3848-4289-8CC8-CCDCBAB47169",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE2B5498-4AA2-4B3B-A526-6732035B3053",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A9529891-B227-4616-B528-668C69359C5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1A2C074A-D514-422C-ACE5-465303A93080",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "AB6526EE-4256-48F8-BE6A-F34797BD0BD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "06520820-6E50-46EC-880A-786E59F131FA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E66C5ABA-7727-4562-A792-5E450098D520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to \"Insecure Unserialize.\""
},
{
"lang": "es",
"value": "Vunerabilidad sin especificar en Apache Solr para la extensi\u00f3n TYPO3 anterior a 2.8.3 con impacto y vectores de ataque desconocidos relacionados con \"Deserializaci\u00f3in Insegura\""
}
],
"id": "CVE-2013-6288",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2013-10-28T22:55:04.163",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/54978"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://typo3.org/extensions/repository/view/solr"
},
{
"source": "cve@mitre.org",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/62674"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/54978"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://typo3.org/extensions/repository/view/solr"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/62674"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2013-10-28 22:55
Modified
2025-04-11 00:51
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| ingo_renner | apache_solr | * | |
| ingo_renner | apache_solr | 1.0 | |
| ingo_renner | apache_solr | 1.3.0 | |
| ingo_renner | apache_solr | 1.3.1 | |
| ingo_renner | apache_solr | 2.1.0 | |
| ingo_renner | apache_solr | 2.2.0 | |
| ingo_renner | apache_solr | 2.2.1 | |
| ingo_renner | apache_solr | 2.2.2 | |
| ingo_renner | apache_solr | 2.8.0 | |
| ingo_renner | apache_solr | 2.8.1 | |
| typo3 | typo3 | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B9314F3A-5E7D-4FBE-A46C-35A6F3F3A7BA",
"versionEndIncluding": "2.8.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "211526D1-C48E-43C4-8E60-9A3DDABC53D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D844805F-73B6-461C-94DF-F2950AB4E270",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3E2C38DE-FF31-4CAC-8AE2-A596BFBC0621",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "83ECCAB7-3848-4289-8CC8-CCDCBAB47169",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE2B5498-4AA2-4B3B-A526-6732035B3053",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A9529891-B227-4616-B528-668C69359C5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1A2C074A-D514-422C-ACE5-465303A93080",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "AB6526EE-4256-48F8-BE6A-F34797BD0BD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "06520820-6E50-46EC-880A-786E59F131FA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E66C5ABA-7727-4562-A792-5E450098D520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad de cross-site scripting (XSS) en la extensi\u00f3n Apache Soir para TYPO3 (soir) en versiones anteriores a la 2.8.3 permite a atacantes remotos inyectar scripts web o HTML arbitrarios a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2013-6289",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2013-10-28T22:55:04.180",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/54978"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://typo3.org/extensions/repository/view/solr"
},
{
"source": "cve@mitre.org",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/62674"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/54978"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://typo3.org/extensions/repository/view/solr"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/62674"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2013-6288 (GCVE-0-2013-6288)
Vulnerability from cvelistv5
Published
2013-10-28 22:00
Modified
2024-08-06 17:39
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
References
| ► | URL | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T17:39:01.180Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "62674",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/62674"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/54978"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://typo3.org/extensions/repository/view/solr"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-09-25T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to \"Insecure Unserialize.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-11-02T09:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "62674",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/62674"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/54978"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://typo3.org/extensions/repository/view/solr"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-6288",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to \"Insecure Unserialize.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "62674",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/62674"
},
{
"name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/",
"refsource": "MISC",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54978"
},
{
"name": "http://typo3.org/extensions/repository/view/solr",
"refsource": "CONFIRM",
"url": "http://typo3.org/extensions/repository/view/solr"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-6288",
"datePublished": "2013-10-28T22:00:00",
"dateReserved": "2013-10-28T00:00:00",
"dateUpdated": "2024-08-06T17:39:01.180Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2013-6289 (GCVE-0-2013-6289)
Vulnerability from cvelistv5
Published
2013-10-28 22:00
Modified
2024-08-06 17:39
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
| ► | URL | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T17:39:01.229Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "62674",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/62674"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/54978"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://typo3.org/extensions/repository/view/solr"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-09-25T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-11-02T09:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "62674",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/62674"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/54978"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://typo3.org/extensions/repository/view/solr"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-6289",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "62674",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/62674"
},
{
"name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/",
"refsource": "MISC",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/"
},
{
"name": "54978",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54978"
},
{
"name": "http://typo3.org/extensions/repository/view/solr",
"refsource": "CONFIRM",
"url": "http://typo3.org/extensions/repository/view/solr"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-6289",
"datePublished": "2013-10-28T22:00:00",
"dateReserved": "2013-10-28T00:00:00",
"dateUpdated": "2024-08-06T17:39:01.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}