CVE-2013-6407

Description

The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Risk Information

Base Score

9.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

6.719

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-6612,CVE-2013-6407 are fixed in Apache-solr-core 4.1.0	Windows
Vulnerabilities CVE-2012-6612,CVE-2013-6407 are fixed in Apache-solr-core for Linux 4.1.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234