Unscored severity · published Oct 28, 2013
CVE-2013-6289
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Apache Solr · Ingo Renner
through 2.8.2; 1.0; 1.3.0; 1.3.1; 2.1.0; 2.2.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6289
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6289
Vendor Advisory
http://secunia.com/advisories/54978
Patch
http://typo3.org/extensions/repository/view/solr
typo3.org
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/
www.securityfocus.com
http://www.securityfocus.com/bid/62674
More from Apache Solr
–
CVE-2013-6288
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."