GHSA-2q2r-xgj5-h3hm

ghsaUSosv

Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting

view advisory published 2022-05-02Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2009-3821US	medium4.3	2.00% (81st)	—	2009-10-28
Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

references

External citations — patches, advisories, analysis.

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014WEB
https://github.com/TYPO3-Solr/ext-solrPACKAGE
https://github.com/TYPO3-Solr/ext-solr/commit/5192f489a13ff9417d7b57c63420187789beea5bWEB
https://nvd.nist.gov/vuln/detail/CVE-2009-3821ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan