CVE-2012-6612

EUVD-2022-2772
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
apachesolr
𝑥
≤ 4.0.0
apachesolr
4.0.0:alpha
apachesolr
4.0.0:beta
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
lucene-solr
bookworm
3.6.2+dfsg-26
fixed
bullseye
3.6.2+dfsg-24
fixed
sid
3.6.2+dfsg-26
fixed
trixie
3.6.2+dfsg-26
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
lucene-solr
artful
not-affected
lucid
dne
precise
dne
quantal
ignored
raring
ignored
saucy
ignored
trusty
not-affected
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
ignored
zesty
ignored
References
http://rhn.redhat.com/errata/RHSA-2013-1844.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup
https://issues.apache.org/jira/browse/SOLR-3895
http://rhn.redhat.com/errata/RHSA-2013-1844.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup
https://issues.apache.org/jira/browse/SOLR-3895