CVE-2012-6612

Description

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.186

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-6612,CVE-2013-6407 are fixed in Apache-solr-core 4.1.0	Windows
Vulnerabilities CVE-2012-6612,CVE-2013-6407 are fixed in Apache-solr-core for Linux 4.1.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234