What is GHSA-v6gf-x8fp-532v?

GHSA-v6gf-x8fp-532v is a security advisory published by GitHub Security Advisories with Medium severity. Improper Neutralization of Input During Web Page Generation in Apache Solr

Which CVE IDs does GHSA-v6gf-x8fp-532v cover?

GHSA-v6gf-x8fp-532v covers the following CVE IDs: CVE-2015-8797. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v6gf-x8fp-532v?

GHSA-v6gf-x8fp-532v has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-v6gf-x8fp-532v?

GHSA-v6gf-x8fp-532v affects 1 product, including: maven/org.apache.solr:solr-core:\u003c= 5.3.0.

GHSA-v6gf-x8fp-532vMediumCVSS 6.1

Improper Neutralization of Input During Web Page Generation in Apache Solr

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2015-8797 →

📋 Description

Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI.

🎯 Affected products1

maven/org.apache.solr:solr-core:<= 5.3.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2015-8797
https://issues.apache.org/jira/browse/SOLR-7949
http://www-01.ibm.com/support/docview.wss?uid=swg21975544
https://github.com/advisories/GHSA-v6gf-x8fp-532v